SAP NetWeaver Visual Composer vulnerabilities

2 known vulnerabilities in SAP NetWeaver Visual Composer from SAP. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.9 Critical severity

  SAP NetWeaver Visual Composer: Exposed Dangerous Method or Function

  CVE-2026-89110Oct 13, 2026SAP

  SAP NetWeaver Visual Composer does not perform sufficient authorization checks in certain portal functionality. An attacker with low privileges could invoke internal operations on a preconfigured remote system. Depending on the remote connection configuration,

• 7.6 High severity

  SAP NetWeaver Visual Composer: Improper Limitation of a Pathname to a Restricted Directory

  CVE-2025-42977Jun 10, 2025SAP

  SAP NetWeaver Visual Composer contains a Directory Traversal vulnerability caused by insufficient validation of input paths provided by a high-privileged user. This allows an attacker to read or modify arbitrary files, resulting in a high impact on confidentia