CVE-2025-42999Critical· 9.1▾ Hadal⚠ Exploited in the wildSAP NetWeaver Visual Composer Metadata Uploader is vulnerable when a privileged user can upload untrusted or malicious content which, when deserialized, could potentially lead to a compromise of confidentiality, integrity, and availabili…
▾ Hadal zone — Critical and actively exploited (CISA KEV / 0day)
impact 50.1 · likelihood 2.3 · exploitation 25 · ransomware 5
The latest CVEs are free to read. CVE-2025-42999 is outside the free window — sign in (free) to view the full technical detail, affected versions, references, and raw markdown.