SAP SE SAP Netweaver Visual Composer vulnerabilities

2 vulnerabilities

Known vulnerabilities in SAP SE SAP Netweaver Visual Composer, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

9.9CVE-2026-89110sap_sesap netweaver visual composer
EPSS score
0.31%
SAP NetWeaver Visual Composer does not perform sufficient authorization checks in certain portal functionality. An attacker with low privileges could invoke internal operations on a preconfigured remote system. Depending on the remote connection configuration, this could lead to a full compromise of the remote system. This results in a high impact on confidentiality, integrity and availability.7.6CVE-2025-42977sap_sesap netweaver visual composer
EPSS score
0.59%
SAP NetWeaver Visual Composer contains a Directory Traversal vulnerability caused by insufficient validation of input paths provided by a high-privileged user. This allows an attacker to read or modify arbitrary files, resulting in a high impact on confidentiality and a low impact on integrity.