Critical SAP Zero-Day Vulnerability Under Active Exploitation
Key Takeaways
⇨ A critical zero-day vulnerability (CVE-2025-31324) in SAP systems has been actively exploited by unauthenticated threat actors, posing severe risks such as full control over vulnerable systems and unrestricted access to sensitive business data.
⇨ SAP has released an emergency security patch (SAP Note 3594142) to address this vulnerability, and organizations are urged to apply it immediately to prevent potential attacks, particularly on internet-facing SAP Java systems.
⇨ For those unable to apply the patch right away, SAP recommends disabling or preventing access to the vulnerable Visual Composer component as an interim measure, with further guidance available in SAP Note 3596125.
Active exploitation of a critical zero-day vulnerability (CVE-2025-31324) in the SAP Visual Composer component allows unauthenticated attackers to gain full control over SAP systems, prompting SAP to release an emergency patch and urging customers to either apply it or disable access to the vulnerable component.
Premium
