Sap Netweaver (Visual Composer Development Server)

Submit a proposal Propose CVE/GCVE/GHSA reference

Approved changes feed: RSS · Atom

cpe:2.3:a:sap_se:sap_netweaver_(visual_composer_development_server):*:*:*:*:*:*:*:*

part: a version: * update: *

VendorSap Se (f8f3f5db-c060-5230-a8bd-f91674203607)
ProductSap Netweaver (Visual Composer Development Server) (3c08aea9-8f7a-540f-ae6b-c3781e707b44)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-42999 vulnerable 2026-06-08 07:25:08.525964 Insecure Deserialization in SAP NetWeaver (Visual Composer development server)
CRITICAL (9.1)
SAP NetWeaver Visual Composer Metadata Uploader is vulnerable when a privileged user can upload untrusted or malicious content which, when deserialized, could potentially lead to a compromise of confidentiality, integrity, and availability of the host system.
Published: 2025-05-13T00:17:43.710Z
Updated: 2026-02-26T18:28:37.085Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-31324 vulnerable 2026-06-08 07:17:02.743169 Missing Authorization check in SAP NetWeaver (Visual Composer development server)
CRITICAL (10)
SAP NetWeaver Visual Composer Metadata Uploader is not protected with a proper authorization, allowing unauthenticated agent to upload potentially malicious executable binaries that could severely harm the host system. This could significantly affect the confidentiality, integrity, and availability of the targeted system.
Published: 2025-04-24T16:50:27.706Z
Updated: 2026-02-26T18:28:05.363Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.