Week in review: Critical SAP NetWeaver flaw exploited, RSAC 2025 Conference
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2025-1976 | Admin-to-Root Privilege Escalation in Broadcom Brocade Fabric OS 9.1 | 8.6 | <1% | KEV | KEV |
| CVE-2025-31324 | Unauthenticated File Upload RCE in SAP NetWeaver Visual Composer | 9.8 | 99% | KEVRansomwarePoC | KEV |
| CVE-2025-3928 | Actively Exploited Authenticated Webshell Flaw in Commvault Web Server | 8.7 | 3% | KEV | KEV |
| CVE-2025-42599 | Unauthenticated RCE via Stack-Based Buffer Overflow in Qualitia Active! mail 6 | 9.8 | 3% | KEV | KEV |
From the original article
4 min read at helpnetsecurity.com
Here’s an overview of some of last week’s most interesting news, articles, interviews and videos: RSAC 2025 Conference took place at the Moscone Center in San Francisco. Check out our microsite for related news, photos, product releases, and more. Critical SAP NetWeaver flaw exploited by suspected initial access broker (CVE-2025-31324)
By @helpnetsecurity · helpnetsecurity.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.