SAP
Security incidents tagged SAP. Newest first.
0 SAP incidents in the last 12 months
- Incidents
- 4
- Live
- 0
- Patched
- 4
- Days without an incident
- 525
- Longest quiet run: 525 days (May 16–Oct 22)
Show 4 older incidents4 older incidents
May 2025 1
CriticalSAP NetWeaver: NetWeaver Deserialization VulnerabilityPatched
SAP NetWeaver Patched
SAP NetWeaver Visual Composer Metadata Uploader contains a deserialization vulnerability that allows a privileged attacker to compromise the confidentiality, integrity, and availability of the host system by deserializing untrusted or malicious content. Added to CISA KEV on 2025-05-15.
Open incident →CVE-2025-42999
April 2025 1
CriticalSAP NetWeaver Visual Composer zero-day: unauthenticated webshell uploads (CVE-2025-31324)Patched
SAP NetWeaver Visual Composer Patched
A CVSS 10 missing-authorization flaw in the NetWeaver Visual Composer Metadata Uploader let anyone POST JSP webshells to /developmentserver/metadatauploader. ReliaQuest found it while investigating compromises; SAP shipped an emergency fix on April 24, 2025.
Open incident →CVE-2025-31324
March 2025 1
HighSAP NetWeaver: NetWeaver Directory Traversal VulnerabilityPatched
SAP NetWeaver Patched
SAP NetWeaver Application Server (AS) Java contains a directory traversal vulnerability in scheduler/ui/js/ffffffffbca41eb4/UIUtilJavaScriptJS that allows a remote attacker to read arbitrary files via a .. (dot dot) in the query string. Added to CISA KEV on 2025-03-19.
Open incident →CVE-2017-12637
September 2024 1
CriticalSAP Commerce Cloud Deserialization of Untrusted DataPatched
SAP Commerce Cloud Patched
SAP Commerce Cloud (formerly known as Hybris) contains a deserialization of untrusted data vulnerability within the mediaconversion and virtualjdbc extension that allows for code injection. Added to the CISA KEV catalog on 2024-09-30. CVE-2019-0344 was assigned before 2024; the KEV listing came in 2024.
Open incident →CVE-2019-0344
