topic Re: Vulnerabilities and Compromises in Coffee Corner Discussions

Vulnerabilities and Compromises

JimSpath — Sun, 27 Apr 2025 22:06:55 GMT

Over this past weekend I saw 2 social media posts on a "zero-day" vulnerability. As usual with bad news, it dropped when many people may not be on the office network. I am curious who has seen this news, how they found it, and whether they escalated/responded. Don't post with "we're on X version" or whatever, just if you knew/know.

"SAP has released an out-of-band emergency update to fix a critical zero-day vulnerability (CVE-2025-31324) in NetWeaver Visual Composer — and it’s already being exploited in the wild." [source: https://infosec.exchange/@Efani/114405113950458290 ]

See: SAP Security Note 3594142

Re: Vulnerabilities and Compromises

TammyPowlas — Mon, 28 Apr 2025 09:26:53 GMT

We received several emails from SAP about this note.

And it is all over Linked In.

Re: Vulnerabilities and Compromises

abo — Mon, 28 Apr 2025 09:40:14 GMT

as @TammyPowlas noted, it is just about everywhere... I even got messages from non-SAP friends quoting other sources! 😄

Re: Vulnerabilities and Compromises

smarchesini — Tue, 29 Apr 2025 12:05:32 GMT

And I just learn from you! 😅
Maybe because I'm not in the basis team

Re: Vulnerabilities and Compromises

joachimrees1 — Tue, 20 May 2025 12:56:31 GMT

I go an e-mail "A priority 'Very High' SAP Note/KBA has just been released on component EP-VC-INF" (Fr 25.04.2025 14:12)