Approved changes feed: RSS · Atom

cpe:2.3:a:sap_se:sap_netweaver_visual_composer:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorSap Se (f8f3f5db-c060-5230-a8bd-f91674203607)
ProductSap Netweaver Visual Composer (1c2c5227-9dcf-58a8-8dcd-2d2657ec7257)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-42977 vulnerable 2026-06-08 07:25:08.497730 Directory Traversal vulnerability in SAP NetWeaver Visual Composer
HIGH (7.6)
SAP NetWeaver Visual Composer contains a Directory Traversal vulnerability caused by insufficient validation of input paths provided by a high-privileged user. This allows an attacker to read or modify arbitrary files, resulting in a high impact on confidentiality and a low impact on integrity.
Published: 2025-06-10T00:10:43.679Z
Updated: 2025-06-10T15:26:56.805Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.