Exploit / PoCcriticalExploited in the wild

U.S. CISA adds SAP NetWeaver flaw to its Known Exploited Vulnerabilities catalog

Security Affairsby @securityaffairsApr 30, 2025 · 00:05 UTC (Apr 30, 2025)3 min read2

Read at securityaffairs.com

Analyze CVE-2025-31324 with Vani AIImpact, affected versions, exploitation, mitigations and detection

CVEs: CVE-2025-31324 CVE-2017-9844

Tags: cve-2025-31324 cve-2017-9844 exploit

Vulnerabilities mentioned

All

CVE	Vulnerability	CVSS	EPSS	Signals	Published
CVE-2017-9844	SAP NetWeaver 7400.12.21.30308 allows remote attackers to cause a denial of service and possibly execute arbitrary code via a crafted serialized Java object in…	7.5	6%		Jul 12, 2017
CVE-2025-31324	Unauthenticated File Upload RCE in SAP NetWeaver Visual Composer	9.8	99%	KEVRansomwarePoC	Apr 24, 2025 KEV Apr 29, 2025

From the original article

3 min read at securityaffairs.com

U. S. Cybersecurity and Infrastructure Security Agency (CISA) adds SAP NetWeaver flaw to its Known Exploited Vulnerabilities catalog.

Security Affairs

By @securityaffairs · securityaffairs.com

Read the full article at Security Affairs

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.