[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fsYliBIY_9JN6UQ6rLJSQUGjI2TQLTntW-4lhzBzWFFE":3,"g5a-risk:CVE-2025-31324":154},{"success":4,"data":5,"meta":151},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":40,"epssPercentile":29,"epssTimeSeries":41,"severity":42,"affectedProducts":43,"affectedProductsCount":49,"references":50,"referencesCount":31,"weaknesses":77,"weaknessesCount":49,"isActivelyExploited":4,"cisaInfo":86,"otxData":29,"relatedBlogPosts":87,"seoMetadata":88,"configurations":113,"relatedVendorCves":122,"notableEvents":123},"CVE-2025-31324","What is CVE-2025-31324?","SAP NetWeaver Visual Composer Metadata Uploader is not protected with a proper authorization, allowing unauthenticated agent to upload potentially malicious executable binaries that could severely harm the host system. This could significantly affect the confidentiality, integrity, and availability of the targeted system.","SAP NetWeaver Visual Composer Metadata Uploader is not protected with a proper authorization, allowing unauthenticated agent to upload potentially malicious ...","2025-04-24T17:15:35.913","2025-05-06T20:59:33.773",9.8,"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H",{"CVSSMetricV31":15,"CVSSMetricV30":38,"CVSSMetricV2":39,"CVSSMetricV40":29},[16,32],{"Source":17,"Type":18,"CVSSData":19,"ExploitabilityScore":30,"ImpactScore":31},"cna@sap.com","Secondary",{"Version":20,"VectorString":21,"AttackVector":22,"AttackComplexity":23,"PrivilegesRequired":24,"UserInteraction":24,"Scope":25,"ConfidentialityImpact":26,"IntegrityImpact":26,"AvailabilityImpact":26,"BaseScore":27,"BaseSeverity":28,"ExploitCodeMaturity":29,"RemediationLevel":29,"ReportConfidence":29,"TemporalScore":29,"TemporalSeverity":29,"ConfidentialityRequirement":29,"IntegrityRequirement":29,"AvailabilityRequirement":29,"ModifiedAttackVector":29,"ModifiedAttackComplexity":29,"ModifiedPrivilegesRequired":29,"ModifiedUserInteraction":29,"ModifiedScope":29,"ModifiedConfidentialityImpact":29,"ModifiedIntegrityImpact":29,"ModifiedAvailabilityImpact":29,"EnvironmentalScore":29,"EnvironmentalSeverity":29},"3.1","CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:C\u002FC:H\u002FI:H\u002FA:H","NETWORK","LOW","NONE","CHANGED","HIGH",10,"CRITICAL",null,3.9,6,{"Source":33,"Type":34,"CVSSData":35,"ExploitabilityScore":30,"ImpactScore":37},"nvd@nist.gov","Primary",{"Version":20,"VectorString":13,"AttackVector":22,"AttackComplexity":23,"PrivilegesRequired":24,"UserInteraction":24,"Scope":36,"ConfidentialityImpact":26,"IntegrityImpact":26,"AvailabilityImpact":26,"BaseScore":12,"BaseSeverity":28,"ExploitCodeMaturity":29,"RemediationLevel":29,"ReportConfidence":29,"TemporalScore":29,"TemporalSeverity":29,"ConfidentialityRequirement":29,"IntegrityRequirement":29,"AvailabilityRequirement":29,"ModifiedAttackVector":29,"ModifiedAttackComplexity":29,"ModifiedPrivilegesRequired":29,"ModifiedUserInteraction":29,"ModifiedScope":29,"ModifiedConfidentialityImpact":29,"ModifiedIntegrityImpact":29,"ModifiedAvailabilityImpact":29,"EnvironmentalScore":29,"EnvironmentalSeverity":29},"UNCHANGED",5.9,[],[],0.99486,[40,40,40,40,40,40,40],"Critical",[44],{"vendor":45,"product":46,"version":47,"criteria":48,"vulnerable":4},"sap","netweaver","7.50","cpe:2.3:a:sap:netweaver:7.50:*:*:*:*:*:*:*",1,[51,56,61,66,71,75],{"url":52,"source":53,"tags":54},"https:\u002F\u002Fme.sap.com\u002Fnotes\u002F3594142","Sap",[55],"Permissions Required",{"url":57,"source":58,"tags":59},"https:\u002F\u002Furl.sap\u002Fsapsecuritypatchday","Url",[60],"Vendor Advisory",{"url":62,"source":63,"tags":64},"https:\u002F\u002Fonapsis.com\u002Fblog\u002Factive-exploitation-of-sap-vulnerability-cve-2025-31324\u002F","Onapsis",[65],"Third Party Advisory",{"url":67,"source":68,"tags":69},"https:\u002F\u002Fwww.bleepingcomputer.com\u002Fnews\u002Fsecurity\u002Fsap-fixes-suspected-netweaver-zero-day-exploited-in-attacks\u002F","Bleepingcomputer",[70],"Press\u002FMedia Coverage",{"url":72,"source":73,"tags":74},"https:\u002F\u002Fwww.theregister.com\u002F2025\u002F04\u002F25\u002Fsap_netweaver_patch\u002F","Theregister",[70],{"url":62,"source":63,"tags":76},[65],[78],{"id":79,"name":80,"description":81,"extendedDescription":82,"status":83,"abstraction":84,"structure":85},"CWE-434","Unrestricted Upload of File with Dangerous Type","The product allows the upload or transfer of dangerous file types that are automatically processed within its environment.","","Draft","Base","Simple",{"shortDescription":82,"requiredAction":82,"vulnerabilityName":82,"dateAdded":29},[],{"title":89,"metaDescription":90,"keywords":91,"canonicalUrl":92,"structuredData":93},"What is CVE-2025-31324? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2025-31324, a critical severity cyber security vulnerability from 2025. High exploit probability (99.5%). SAP NetWeaver Visual ...","CVE-2025-31324, CVE-2025-31324 vulnerability, CVE-2025-31324 security, critical severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2025, CVSS score, exploit, patch, remediation, sap security, netweaver vulnerability, high risk vulnerability, actively exploited, exploit available","\u002Fwhat-is\u002Fcve-2025-31324",{"@context":94,"@type":95,"headline":89,"description":90,"datePublished":10,"dateModified":11,"author":96,"publisher":100,"about":104,"mainEntityOfPage":108,"articleSection":111,"keywords":112},"https:\u002F\u002Fschema.org","TechArticle",{"@type":97,"name":98,"url":99},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":97,"name":98,"url":99,"logo":101},{"@type":102,"url":103},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":105,"name":6,"description":106,"additionalType":107},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":109,"@id":110},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2025-31324","Cybersecurity","CVE-2025-31324, CVE-2025-31324 vulnerability, CVE-2025-31324 security, critical severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[114],{"Operator":29,"Negate":29,"Nodes":115},[116],{"Operator":117,"Negate":118,"CPEMatch":119},"OR",false,[120],{"Vulnerable":4,"Criteria":48,"MatchCriteriaID":121,"VersionStartExcluding":29,"VersionStartIncluding":29,"VersionEndExcluding":29,"VersionEndIncluding":29},"F2B37045-2FB7-49BB-AE38-B84FAA6ADFB0",[],[124,131,138,144],{"id":125,"eventType":126,"eventTime":127,"details":128,"label":129,"color":130},"dab3ede7-846e-4cc9-b114-e4ef989cb0f2","NEW_NVD","2025-04-25T02:15:27.465258+00:00","New CVE added to NVD","Published to NVD","blue",{"id":132,"eventType":133,"eventTime":134,"details":135,"label":136,"color":137},"1a7cb934-d7f5-4516-b9a8-7499b8c7faf4","NEW_CISA","2025-04-29T23:45:03.500924+00:00","CVE added to CISA Known Exploited Vulnerabilities","Added to CISA KEV","red",{"id":139,"eventType":140,"eventTime":141,"details":142,"label":143,"color":137},"a00cfbfe-b6e1-42e7-bd80-a272fb756379","HIGH_EPSS_DELTA","2025-06-11T10:09:41.733497+00:00","Daily EPSS score increased by 0.737 on 2025-04-26","EPSS Score Increased",{"id":145,"eventType":146,"eventTime":147,"details":148,"label":149,"color":150},"da8f7228-7633-4fb3-aa20-c26e51073e3c","LOW_EPSS_DELTA","2025-06-23T09:39:16.134219+00:00","Daily EPSS score decreased by 0.100 on 2025-04-26","EPSS Score Decreased","green",{"lastModified":11,"cacheTime":152,"version":153},1792358090684,"2.0",{"score":155,"band":42,"action":156,"scoredAt":157},90,"Emergency patch","2026-10-16T07:06:59.22957+00:00"]