CVE-2025-42999

SAP NetWeaver Deserialization Vulnerability

Description

SAP NetWeaver Visual Composer Metadata Uploader contains a deserialization vulnerability that allows a privileged attacker to compromise the confidentiality, integrity, and availability of the host system by deserializing untrusted or malicious content.

Severity: CRITICAL

CVSS Score: 9.1

Vendor: SAP

Product: NetWeaver