CVE-2025-42999
🔥 Known Exploited (CISA KEV)CRITICAL
9.1
CVSS Severity Score
Vulnerability Description
SAP NetWeaver Visual Composer Metadata Uploader is vulnerable when a privileged user can upload untrusted or malicious content which, when deserialized, could potentially lead to a compromise of confidentiality, integrity, and availability of the host system.
Affected Platforms (CPE)
📦
Sap
Netweaver
= 7.5