SN
Product
SAP NetWeaver (Visual Composer development server)
On CISA KEVExploited in the wildRansomware-linked
2
CVEs
2
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 2High 0Medium 0Low 0
Watch
Add SAP NetWeaver (Visual Composer development server) to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2025-31324 RansomwareIn wildKEV | 9.8 | Apr 24 | Missing Authorization check in SAP NetWeaver (Visual Composer development server) Affected: VCFRAMEWORK 7.50 |
| CVE-2025-42999 RansomwareIn wildKEV | 9.1 | May 13 | Insecure Deserialization in SAP NetWeaver (Visual Composer development server) Affected: VCFRAMEWORK 7.50 |
Showing 2