SAP Product Security Update Advisory (CVE-2025-31324)

Overview

 

We have released security updates to fix vulnerabilities in SAP products. Users of affected products are advised to update to the latest version.
 

 

Affected Products

 

CVE-2025-31324

SAP NetWeaver Version: VCFRAMEWORK 7.50

 

 

Resolved Vulnerabilities

 

File Upload Vulnerability (CVE-2025-31324)

 

 

Vulnerability Patches

Vulnerability Patches have been made available in the latest update. Please follow the instructions on the Referenced Sites to update to the latest Vulnerability Patches version.

 

Patched versions are available
see [2]

 

 

References
[1] SAP Security Patch Day – April 2025
https://support.sap.com/en/my-support/knowledge-base/security-notes-news/april-2025.html
[2] https://me.sap.com/notes/3594142