Directory Traversal Vulnerability in SAP NetWeaver Visual Composer

CVE-2025-42977

What is CVE-2025-42977?

SAP NetWeaver Visual Composer is susceptible to a Directory Traversal vulnerability arising from inadequate validation of input paths submitted by users with elevated privileges. This flaw enables attackers to potentially gain access to, or alter, arbitrary files on the server, which can severely compromise the confidentiality of sensitive information while also posing a risk to data integrity.

References