China-Linked Hackers Exploit SAP and SQL Server Flaws in Attacks Across Asia and Brazil
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2017-9805 | XML Deserialization RCE in Apache Struts 2 REST Plugin | 8.1 | 99% | KEVPoC | KEV |
| CVE-2021-22205 | Unauthenticated RCE in GitLab CE/EE via ExifTool Image Parsing (CVE-2021-22205) | 10.0 | 100% | KEVRansomwarePoC ×2 | KEV |
CVE-2024-27198+1 related CVE | Authentication Bypass in JetBrains TeamCity CI/CD Server | 9.8 group max | 100% | KEVRansomware | KEV |
CVE-2024-51378+1 related CVE | Unauthenticated Command Injection in CyberPanel | 9.8 | 95% | KEVRansomwarePoC ×2 | KEV |
| CVE-2024-56145 | Unauthenticated Code Injection RCE in Craft CMS | 9.3 | 97% | KEVPoC | KEV |
| CVE-2024-9047 | Unauthenticated Path Traversal in WordPress File Upload Plugin (CVE-2024-9047) | 9.8 | 93% | ||
| CVE-2025-31324 | Unauthenticated File Upload RCE in SAP NetWeaver Visual Composer | 9.8 | 99% | KEVRansomwarePoC | KEV |
From the original article
3 min read at thehackernews.com
Ravie Lakshmanan May 30, 2025 Vulnerability / Threat Intelligence The China-linked threat actor behind the recent in-the-wild exploitation of a critical security flaw in SAP NetWeaver has been attributed to a broader set of attacks targeting organizations in Brazil, India, and Southeast Asia since 2023.
By @TheHackersNews · thehackernews.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.