CVE Watch—

CVE-2025-31324

SAP NetWeaver Unrestricted File Upload Vulnerability

CVSS

—

No CVSS

EPSS

99.4%

p100

KEV

YES

Apr 29, 2025

Exploit Today

0-100

Published: — · Last modified: —

EPSS · 30d

99.4%EPSS · 30 days99.4%

2026-06-302026-07-16

KEV catalog record

Product

SAP / NetWeaver

Vulnerability

SAP NetWeaver Unrestricted File Upload Vulnerability

Added to KEV

Apr 29, 2025

Remediate by

May 20, 2025

Known ransomware use

Yes

Summary description

SAP NetWeaver Visual Composer Metadata Uploader contains an unrestricted file upload vulnerability that allows an unauthenticated agent to upload potentially malicious executable binaries.

Required action

Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.

Notes

https://me.sap.com/notes/3594142 ; https://nvd.nist.gov/vuln/detail/CVE-2025-31324

Related CVEs

CVECVSSEPSSKEVRExploitTitleMod.

CVE-2020-6287—

99.8%

KEV—80SAP NetWeaver Missing Authentication for Critical Function Vulnerability—CVE-2017-12637—

99.8%

KEV—80SAP NetWeaver Directory Traversal Vulnerability—CVE-2016-2386—

99.3%

KEV—80SAP NetWeaver SQL Injection Vulnerability—CVE-2016-2388—

98.8%

KEV—80SAP NetWeaver Information Disclosure Vulnerability—CVE-2016-3976—

98.7%

KEV—80SAP NetWeaver Directory Traversal Vulnerability—CVE-2021-38163—

98.3%

KEV—79SAP NetWeaver Unrestricted File Upload Vulnerability—