title

ReliaQuest Uncovers New Critical Vulnerability in SAP NetWeaver

charset

UTF-8

description

ReliaQuest has uncovered a new vulnerability in SAP NetWeaver, CVE-2025-31324, involving unauthorized file uploads and malicious execution.

viewport

width=device-width, initial-scale=1, shrink-to-fit=no

Content-Security-Policy

default-src 'self'; script-src 'self' blob: 'unsafe-inline' 'unsafe-eval' *.googletagmanager.com *.usercentrics.eu *.monsido.com *.reliaquest.com *.google.com *.gstatic.com *.wistia.com *.wistia.net src.litix.io *.sentry-cdn.com *.6sc.co *.bing.com *.clarity.ms *.demandscience.com *.zi-scripts.com *.marketo.net *.g2.com *.doubleclick.net *.licdn.com *.buzzsprout.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com *.reliaquest.com blob: *.wistia.com *.wistia.net *.usercentrics.eu; img-src 'self' data: *.zi-scripts.com *.doubleclick.net *.clarity.ms *.licdn.com *bat.bing.com *.6sc.co *.wistia.com *.googletagmanager.com *.google.com https://*.cloudinary.com *.reliaquest.com *.ctfassets.net *.googlesyndication.com *.monsido.com *.wistia.net *.usercentrics.eu *.buzzsprout.com; media-src 'self' data: blob: *.wistia.com *.cloudinary.com *.ctfassets.net *.wistia.net *.usercentrics.eu *.buzzsprout.com; font-src 'self' data: https://fonts.gstatic.com https://fonts.googleapis.com *.wistia.com *.usercentrics.eu; connect-src 'self' *.zi-scripts.com *.doubleclick.net *.clarity.ms *.licdn.com *bat.bing.com *.6sc.co *.mktoresp.com *.wistia.com *.cloudinary.com *.reliaquest.com *.googlesyndication.com *.google-analytics.com *.usercentrics.eu *.monsido.com *.services-prod.nsvcs.net *.litix.io *.wistia.net *.algolia.net *.google.com *.buzzsprout.com; frame-src 'self' *.wistia.com *.googletagmanager.com *.reliaquest.com *.google.com *.wistia.net *.usercentrics.eu *.buzzsprout.com *.jifflenow.com; child-src blob:; worker-src 'self' blob:; object-src 'none';

og:title

ReliaQuest Uncovers New Critical Vulnerability in SAP NetWeaver

og:description

ReliaQuest has uncovered a new vulnerability in SAP NetWeaver, CVE-2025-31324, involving unauthorized file uploads and malicious execution.

og:locale

en_US

og:type

website

og:url

https://reliaquest.com/blog/threat-spotlight-reliaquest-uncovers-vulnerability-behind-sap-netweaver-compromise/

alternate

https://reliaquest.com/rss.xml

apple-touch-icon

/favicon-RGB-325x325.webp

canonical

https://reliaquest.com/blog/threat-spotlight-reliaquest-uncovers-vulnerability-behind-sap-netweaver-compromise/

icon

/favicon-RGB-50x50.webp

icon

/favicon-RGB-325x325.webp