CVE-2025-31324 - SAP NetWeaver Vulnerability
Brief
CVE-2025-31324 is a critical flaw in SAP NetWeaver’s Visual Composer that allows unauthenticated attackers to upload malicious files and gain full system control. Threat actors are already exploiting it in the wild using JSP web shells for persistence and data theft.