https://pwn.watch/i/sap-netweaver-cve-2025-42999 SAP NetWeaver Visual Composer Metadata Uploader contains a deserialization vulnerability that allows a privileged attacker to compromise the confidentiality, integrity, and availability of the host system by deserializing untrusted or malicious content. Added to CISA KEV on 2025-05-15. en Thu, 15 May 2025 00:00:00 GMT https://pwn.watch/i/sap-netweaver-cve-2025-42999 https://pwn.watch/i/sap-netweaver-cve-2025-42999#2025-05-15-f44cdd4d Thu, 15 May 2025 00:00:00 GMT critical <p>SAP NetWeaver: NetWeaver Deserialization Vulnerability: CISA added CVE-2025-42999 to the KEV catalog (due 2025-06-05).</p>