Research · May 12, 2025 · ZeroDay Catalog
Critical Deserialization Vulnerability in SAP NetWeaver
A serious deserialization vulnerability has been identified in SAP NetWeaver, posing significant risks to system integrity and confidentiality.
What changed
A vulnerability has been discovered in SAP NetWeaver, specifically affecting the Visual Composer Metadata Uploader. This flaw allows a privileged user to upload untrusted or malicious content, which, upon deserialization, may compromise the confidentiality, integrity, and availability of the system.
Who is affected
Organizations utilizing SAP NetWeaver are at risk due to this vulnerability. The following groups are particularly affected:
- SAP NetWeaver users who employ the Visual Composer feature.
- Enterprises relying on SAP for their enterprise resource planning (ERP) solutions.
- Organizations that have implemented custom applications on the SAP NetWeaver platform.
- Privileged users who have the ability to upload content to the system.
What to do
It is crucial for affected organizations to assess their exposure to this vulnerability and take appropriate measures. Immediate actions should include:
- Review user permissions to limit access to the Visual Composer Metadata Uploader.
- Implement monitoring to detect any unauthorized upload attempts.
- Stay updated with SAP's security advisories for patches or mitigations related to this vulnerability.
- Conduct a thorough security audit of the SAP NetWeaver environment to identify potential risks.