CVE-2025-42977 — Directory Traversal vulnerability in SAP NetWeaver Visual Composer

CVE-2025-42977

Directory Traversal vulnerability in SAP NetWeaver Visual Composer PUBLISHED

Description (CNA)

SAP NetWeaver Visual Composer contains a Directory Traversal vulnerability caused by insufficient validation of input paths provided by a high-privileged user. This allows an attacker to read or modify arbitrary files, resulting in a high impact on confidentiality and a low impact on integrity.

Affected (CNA)

Vendor / product	Versions
SAP_SE / SAP NetWeaver Visual Composer	affected VCBASE 7.50

CWE

CWE-22

References

https://me.sap.com/notes/3610591
https://url.sap/sapsecuritypatchday

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.