CVE-2025-42999 CISA KEV · Actively exploitedLinked to ransomware
Insecure Deserialization in SAP NetWeaver (Visual Composer development server)
CVSS score
9.1
EPSS probability
%12.7
Risk score
2.3
Published
1 y ago
Public Exploits · GitHub and Metasploit Intelligence
This tab scans the sources that NVD labels as exploits, GitHub repositories matching the CVE identifier and Rapid7 Metasploit Framework modules. Only links to sources that were actually found are shown.
https://onapsis.com/blog/active-exploitation-of-sap-vulnerability-cve-2025-31324/
Makefile Go / Python
Similar Vulnerabilities
10.0
CVE-2025-31324 Actively exploited
Missing Authorization check in SAP NetWeaver (Visual Composer development server)
S
Patch status unknown Public Exploits:10EPSS %99
10.0
CVE-2026-58231
Improper Authorization in SAP Commerce Cloud (Data Hub Adapter)
S
Patch status unknown Public Exploits:3EPSS %1
9.1
CVE-2026-44758
Code Injection vulnerability in Manufacturing Integration and Intelligence
S
Patch status unknownEPSS %1
10.0
CVE-2026-44756
Memory Corruption vulnerability in SAP Extended Passport (EPP) Processing
S
Patch status unknownEPSS %1
9.8
CVE-2026-34265
Memory Corruption vulnerability in Application Server ABAP for SAP NetWeaver and ABAP Platform
S
Patch status unknownEPSS %1
9.1
CVE-2026-27690
Vulnerability in SAP Approuter
S
Patch status unknownEPSS %1
Get this vulnerability through the API
Affected products, version ranges, exploitation status and patch information in a single request, with a free key.
curl -H "x-api-key: $DAYBREACH_API_KEY" \ "https://api.daybreach.dev/api/v1/intel/cves/CVE-2025-42999"