NetWeaver
Security incidents tagged NetWeaver. Newest first.
0 NetWeaver incidents in the last 12 months
Critical 4 · High 3 · Med 2 · Low 1 · Update ½Severity-weighted: critical 4 · high 3 · medium 2 · low 1 · update ½LessMore
- Incidents
- 1
- Live
- 0
- Patched
- 1
- Days without an incident
- 546
- Longest quiet run: 525 days (May 16–Oct 22)
Show 1 older incident1 older incident
April 2025 1
PatchedSAP NetWeaver Visual Composer zero-day: unauthenticated webshell uploads (CVE-2025-31324)
SAP NetWeaver Visual Composer
A CVSS 10 missing-authorization flaw in the NetWeaver Visual Composer Metadata Uploader let anyone POST JSP webshells to /developmentserver/metadatauploader. ReliaQuest found it while investigating compromises; SAP shipped an emergency fix on April 24, 2025.
Open incident →CVE-2025-31324
