SAPocalypse Now: Critical Vulnerabilities in NetWeaver Spark Fresh Cyber Threats
SAP NetWeaver instances are under threat as a new exploit targeting the vulnerabilities CVE-2025-31324 and CVE-2025-42999 has emerged. Despite patches, over 50 servers remain vulnerable, offering cybercriminals a chance to run amok. It’s like leaving your door unlocked with a sign that says “Free Wi-Fi.”
Hot Take:
Oh SAP! It seems like your NetWeaver is more like a NetLeaver, letting hackers walk in and out with your data. Maybe it’s time to patch things up in the relationship with security?
Key Points:
- Two critical vulnerabilities in SAP NetWeaver: CVE-2025-31324 and CVE-2025-42999.
- Threat actors are chaining these vulnerabilities for code execution.
- Ransomware groups and Chinese APTs have targeted these flaws.
- Over 50 servers still vulnerable as of August, down from 400 in April.
- Security firm Onapsis flags potential for broader attack vectors.
Already a member? Log in here