VulnerabilitycriticalExploited in the wild

China-Linked APTs Exploit SAP CVE-2025-31324 to Breach 581 Critical Systems Worldwide

The Hacker Newsby @TheHackersNewsMay 15, 2025 · 00:00 UTC (May 15, 2025)3 min read2

Read at thehackernews.com

Analyze CVE-2025-31324 with Vani AIImpact, affected versions, exploitation, mitigations and detection

CVEs: CVE-2025-31324 CVE-2025-42999

Tags: cve-2025-31324 cve-2025-42999 vulnerability

Vulnerabilities mentioned

All

CVE	Vulnerability	CVSS	EPSS	Signals	Published
CVE-2025-31324	Unauthenticated File Upload RCE in SAP NetWeaver Visual Composer	9.8	99%	KEVRansomwarePoC	Apr 24, 2025 KEV Apr 29, 2025
CVE-2025-42999	Insecure Deserialization in SAP NetWeaver Visual Composer Metadata Uploader	9.1	13%	KEVRansomwarePoC	May 13, 2025 KEV May 15, 2025

From the original article

3 min read at thehackernews.com

 Ravie Lakshmanan  May 13, 2025 Vulnerability / Threat Intelligence A recently disclosed critical security flaw impacting SAP NetWeaver is being exploited by multiple China-nexus nation-state actors to target critical infrastructure networks.

The Hacker News

By @TheHackersNews · thehackernews.com

Read the full article at The Hacker News

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.