MEIFP – Most Exploited Internet-Facing Products

SAP_SE

Products: SAP Cloud Connector · SAP NetWeaver (Visual Composer development server) · SAP S/4HANA (Private Cloud or On-Premise)

64.6

Score

CVEs

Active

PoC

KEV

#44

Rank

Period:

Product:

CVE ID	Published	CVSS	Exploit	KEV	AC	PR	Auto	Score(hover)	Affected Products	Description
CVE-2025-42957	2025-08-12	9.9v3.1	POC	—	Low	Low	no	0.0	SAP S/4HANA (Private Cloud or On-Premise)	SAP S/4HANA allows an attacker with user privileges to exploit a vulnerability in the function module exposed via RFC. This flaw enables the injection of arbitrary ABAP code into the system, bypassing essential authorization checks. This vulnerability effectively functions as a backdoor, creating th
CVE-2025-42999	2025-05-13	9.1v3.1	ACTIVE		Low	High	no	24.0	SAP NetWeaver (Visual Composer development server)	SAP NetWeaver Visual Composer Metadata Uploader is vulnerable when a privileged user can upload untrusted or malicious content which, when deserialized, could potentially lead to a compromise of confidentiality, integrity, and availability of the host system.
CVE-2025-31324	2025-04-24	10.0v3.1	ACTIVE		Low	None	YES	40.6	SAP NetWeaver (Visual Composer development server)	SAP NetWeaver Visual Composer Metadata Uploader is not protected with a proper authorization, allowing unauthenticated agent to upload potentially malicious executable binaries that could severely harm the host system. This could significantly affect the confidentiality, integrity, and availability
CVE-2024-25642	2024-02-13	7.4v3.1	POC	—	High	None	no	0.0	SAP Cloud Connector	Due to improper validation of certificate in SAP Cloud Connector - version 2.0, attacker can impersonate the genuine servers to interact with SCC breaking the mutual authentication. Hence, the attacker can intercept the request to view/modify sensitive information. There is no impact on the availabi

Each CVE: 10 pts base (Active only), boosted by:

KEV×2.0AC: Low×1.2PR: None×1.3PR: Low×1.1Auto×1.3