{"cve_id":"CVE-2025-31324","title":"SAP NetWeaver Visual Composer Metadata Uploader - Deserialization","severity":"critical","actively_exploited":true,"patterns":["/developmentserver/metadatauploader"],"events":507,"unique_ips":430,"actors":[{"ip":"192.142.28.77","events":12,"country_code":"NL","country":"The Netherlands","org":"Hostpalace Datacenters Ltd","rdns":"hosted-by.host-palace.com","scanner_tag":null},{"ip":"20.163.25.231","events":4,"country_code":"US","country":"United States","org":"Microsoft Corporation","rdns":"azpdwsske6lh.stretchoid.com","scanner_tag":{"key":"stretchoid","label":"Stretchoid","category":"commercial","url":"https://stretchoid.com"}},{"ip":"20.115.90.228","events":3,"country_code":"US","country":"United States","org":"Microsoft Corporation","rdns":"azpdesiynxkz.stretchoid.com","scanner_tag":{"key":"stretchoid","label":"Stretchoid","category":"commercial","url":"https://stretchoid.com"}},{"ip":"172.203.225.221","events":3,"country_code":"US","country":"United States","org":"Microsoft Corporation","rdns":"azpdespvha3e.stretchoid.com","scanner_tag":{"key":"stretchoid","label":"Stretchoid","category":"commercial","url":"https://stretchoid.com"}},{"ip":"20.64.105.183","events":3,"country_code":"US","country":"United States","org":"Microsoft Corporation","rdns":"azpdsg09h0rw.stretchoid.com","scanner_tag":{"key":"stretchoid","label":"Stretchoid","category":"commercial","url":"https://stretchoid.com"}},{"ip":"20.64.106.29","events":3,"country_code":"US","country":"United States","org":"Microsoft Corporation","rdns":"azpdsg3ry68v.stretchoid.com","scanner_tag":{"key":"stretchoid","label":"Stretchoid","category":"commercial","url":"https://stretchoid.com"}},{"ip":"20.163.30.205","events":3,"country_code":"US","country":"United States","org":"Microsoft Corporation","rdns":"azpdwszh9gct.stretchoid.com","scanner_tag":{"key":"stretchoid","label":"Stretchoid","category":"commercial","url":"https://stretchoid.com"}},{"ip":"20.29.19.156","events":2,"country_code":"US","country":"United States","org":"Microsoft Corporation","rdns":"azpdcgdfto0u.stretchoid.com","scanner_tag":{"key":"stretchoid","label":"Stretchoid","category":"commercial","url":"https://stretchoid.com"}},{"ip":"48.214.144.191","events":2,"country_code":"US","country":"United States","org":"Microsoft Corporation","rdns":"azpdcsvo83d4.stretchoid.com","scanner_tag":{"key":"stretchoid","label":"Stretchoid","category":"commercial","url":"https://stretchoid.com"}},{"ip":"20.64.104.141","events":2,"country_code":"US","country":"United States","org":"Microsoft Corporation","rdns":"azpdsgfuhop6.stretchoid.com","scanner_tag":{"key":"stretchoid","label":"Stretchoid","category":"commercial","url":"https://stretchoid.com"}},{"ip":"20.98.137.225","events":2,"country_code":"US","country":"United States","org":"Microsoft Corporation","rdns":"azpdcs0qgecm.stretchoid.com","scanner_tag":{"key":"stretchoid","label":"Stretchoid","category":"commercial","url":"https://stretchoid.com"}},{"ip":"20.65.194.132","events":2,"country_code":"US","country":"United States","org":"Microsoft Corporation","rdns":"azpdss34ezdq.stretchoid.com","scanner_tag":{"key":"stretchoid","label":"Stretchoid","category":"commercial","url":"https://stretchoid.com"}},{"ip":"20.163.2.35","events":2,"country_code":"US","country":"United States","org":"Microsoft Corporation","rdns":"azpdwsa4atbl.stretchoid.com","scanner_tag":{"key":"stretchoid","label":"Stretchoid","category":"commercial","url":"https://stretchoid.com"}},{"ip":"40.124.172.146","events":2,"country_code":"US","country":"United States","org":"Microsoft Corporation","rdns":"azpdsg0hrkum.stretchoid.com","scanner_tag":{"key":"stretchoid","label":"Stretchoid","category":"commercial","url":"https://stretchoid.com"}},{"ip":"40.124.175.166","events":2,"country_code":"US","country":"United States","org":"Microsoft Corporation","rdns":"azpdsg5lt05q.stretchoid.com","scanner_tag":{"key":"stretchoid","label":"Stretchoid","category":"commercial","url":"https://stretchoid.com"}},{"ip":"40.76.116.132","events":2,"country_code":"US","country":"United States","org":"Microsoft Corporation","rdns":"azpdes7s63x9.stretchoid.com","scanner_tag":{"key":"stretchoid","label":"Stretchoid","category":"commercial","url":"https://stretchoid.com"}},{"ip":"52.180.145.98","events":2,"country_code":"US","country":"United States","org":"Microsoft Corporation","rdns":"azpdcgmpa9il.stretchoid.com","scanner_tag":{"key":"stretchoid","label":"Stretchoid","category":"commercial","url":"https://stretchoid.com"}},{"ip":"135.237.126.18","events":2,"country_code":"US","country":"United States","org":"Microsoft Corporation","rdns":"azpdesqlzakx.stretchoid.com","scanner_tag":{"key":"stretchoid","label":"Stretchoid","category":"commercial","url":"https://stretchoid.com"}},{"ip":"20.64.104.82","events":2,"country_code":"US","country":"United States","org":"Microsoft Corporation","rdns":"azpdsgkn8wmd.stretchoid.com","scanner_tag":{"key":"stretchoid","label":"Stretchoid","category":"commercial","url":"https://stretchoid.com"}},{"ip":"20.64.105.238","events":2,"country_code":"US","country":"United States","org":"Microsoft Corporation","rdns":"azpdsgd9sbi1.stretchoid.com","scanner_tag":{"key":"stretchoid","label":"Stretchoid","category":"commercial","url":"https://stretchoid.com"}},{"ip":"20.65.154.146","events":2,"country_code":"US","country":"United States","org":"Microsoft Corporation","rdns":"azpdsg4vq0bf.stretchoid.com","scanner_tag":{"key":"stretchoid","label":"Stretchoid","category":"commercial","url":"https://stretchoid.com"}},{"ip":"20.163.14.51","events":2,"country_code":"US","country":"United States","org":"Microsoft Corporation","rdns":"azpdwsvfb1rb.stretchoid.com","scanner_tag":{"key":"stretchoid","label":"Stretchoid","category":"commercial","url":"https://stretchoid.com"}},{"ip":"20.15.162.238","events":2,"country_code":"US","country":"United States","org":"Microsoft Corporation","rdns":"azpdcgj59w5k.stretchoid.com","scanner_tag":{"key":"stretchoid","label":"Stretchoid","category":"commercial","url":"https://stretchoid.com"}},{"ip":"20.163.14.130","events":2,"country_code":"US","country":"United States","org":"Microsoft Corporation","rdns":"azpdwswntiwo.stretchoid.com","scanner_tag":{"key":"stretchoid","label":"Stretchoid","category":"commercial","url":"https://stretchoid.com"}},{"ip":"20.65.195.118","events":2,"country_code":"US","country":"United States","org":"Microsoft Corporation","rdns":"azpdssb7c6fp.stretchoid.com","scanner_tag":{"key":"stretchoid","label":"Stretchoid","category":"commercial","url":"https://stretchoid.com"}},{"ip":"20.163.37.97","events":2,"country_code":"US","country":"United States","org":"Microsoft Corporation","rdns":"azpdwsa4z761.stretchoid.com","scanner_tag":{"key":"stretchoid","label":"Stretchoid","category":"commercial","url":"https://stretchoid.com"}},{"ip":"40.119.41.94","events":2,"country_code":"US","country":"United States","org":"Microsoft Corporation","rdns":"azpdsgj9e6li.stretchoid.com","scanner_tag":{"key":"stretchoid","label":"Stretchoid","category":"commercial","url":"https://stretchoid.com"}},{"ip":"40.76.248.118","events":2,"country_code":"US","country":"United States","org":"Microsoft Corporation","rdns":"azpdesglar74.stretchoid.com","scanner_tag":{"key":"stretchoid","label":"Stretchoid","category":"commercial","url":"https://stretchoid.com"}},{"ip":"20.98.137.43","events":2,"country_code":"US","country":"United States","org":"Microsoft Corporation","rdns":"azpdcgd5fi0s.stretchoid.com","scanner_tag":{"key":"stretchoid","label":"Stretchoid","category":"commercial","url":"https://stretchoid.com"}},{"ip":"20.55.36.63","events":2,"country_code":"US","country":"United States","org":"Microsoft Corporation","rdns":"azpdes2zr1qg.stretchoid.com","scanner_tag":{"key":"stretchoid","label":"Stretchoid","category":"commercial","url":"https://stretchoid.com"}},{"ip":"74.235.162.254","events":2,"country_code":"US","country":"United States","org":"Microsoft Corporation","rdns":"azpdeskin8ws.stretchoid.com","scanner_tag":{"key":"stretchoid","label":"Stretchoid","category":"commercial","url":"https://stretchoid.com"}},{"ip":"20.65.137.218","events":2,"country_code":"US","country":"United States","org":"Microsoft Corporation","rdns":"azpdsgleoey2.stretchoid.com","scanner_tag":{"key":"stretchoid","label":"Stretchoid","category":"commercial","url":"https://stretchoid.com"}},{"ip":"20.169.104.111","events":2,"country_code":"US","country":"United States","org":"Microsoft Corporation","rdns":"azpdwstdqqk6.stretchoid.com","scanner_tag":{"key":"stretchoid","label":"Stretchoid","category":"commercial","url":"https://stretchoid.com"}},{"ip":"20.64.105.32","events":2,"country_code":"US","country":"United States","org":"Microsoft Corporation","rdns":"azpdsgsthiyl.stretchoid.com","scanner_tag":{"key":"stretchoid","label":"Stretchoid","category":"commercial","url":"https://stretchoid.com"}},{"ip":"172.202.118.46","events":2,"country_code":"US","country":"United States","org":"Microsoft Corporation","rdns":"azpdcsq9e59o.stretchoid.com","scanner_tag":{"key":"stretchoid","label":"Stretchoid","category":"commercial","url":"https://stretchoid.com"}},{"ip":"20.169.49.23","events":2,"country_code":"US","country":"United States","org":"Microsoft Corporation","rdns":"azpdwsi2vhnd.stretchoid.com","scanner_tag":{"key":"stretchoid","label":"Stretchoid","category":"commercial","url":"https://stretchoid.com"}},{"ip":"135.237.125.146","events":2,"country_code":"US","country":"United States","org":"Microsoft Corporation","rdns":"azpdesozt26e.stretchoid.com","scanner_tag":{"key":"stretchoid","label":"Stretchoid","category":"commercial","url":"https://stretchoid.com"}},{"ip":"135.237.127.45","events":2,"country_code":"US","country":"United States","org":"Microsoft Corporation","rdns":"azpdesxe24x7.stretchoid.com","scanner_tag":{"key":"stretchoid","label":"Stretchoid","category":"commercial","url":"https://stretchoid.com"}},{"ip":"20.65.194.105","events":2,"country_code":"US","country":"United States","org":"Microsoft Corporation","rdns":"azpdss4lc1pe.stretchoid.com","scanner_tag":{"key":"stretchoid","label":"Stretchoid","category":"commercial","url":"https://stretchoid.com"}},{"ip":"132.196.42.124","events":2,"country_code":"US","country":"United States","org":"Microsoft Corporation","rdns":"azpdcg6ibcrb.stretchoid.com","scanner_tag":{"key":"stretchoid","label":"Stretchoid","category":"commercial","url":"https://stretchoid.com"}},{"ip":"9.234.8.125","events":2,"country_code":"US","country":"United States","org":"Microsoft Corporation","rdns":"azpdcs7g8bzu.stretchoid.com","scanner_tag":{"key":"stretchoid","label":"Stretchoid","category":"commercial","url":"https://stretchoid.com"}},{"ip":"20.80.105.157","events":2,"country_code":"US","country":"United States","org":"Microsoft Corporation","rdns":"azpdcguvz70x.stretchoid.com","scanner_tag":{"key":"stretchoid","label":"Stretchoid","category":"commercial","url":"https://stretchoid.com"}},{"ip":"20.118.216.221","events":2,"country_code":"US","country":"United States","org":"Microsoft Corporation","rdns":"azpdcsnblfww.stretchoid.com","scanner_tag":{"key":"stretchoid","label":"Stretchoid","category":"commercial","url":"https://stretchoid.com"}},{"ip":"20.40.216.117","events":2,"country_code":"US","country":"United States","org":"Microsoft Corporation","rdns":"azpdcglvjrhf.stretchoid.com","scanner_tag":{"key":"stretchoid","label":"Stretchoid","category":"commercial","url":"https://stretchoid.com"}},{"ip":"172.202.118.69","events":2,"country_code":"US","country":"United States","org":"Microsoft Corporation","rdns":"azpdcsq7gbf8.stretchoid.com","scanner_tag":{"key":"stretchoid","label":"Stretchoid","category":"commercial","url":"https://stretchoid.com"}},{"ip":"172.202.117.196","events":2,"country_code":"US","country":"United States","org":"Microsoft Corporation","rdns":"azpdcs8cd7a8.stretchoid.com","scanner_tag":{"key":"stretchoid","label":"Stretchoid","category":"commercial","url":"https://stretchoid.com"}},{"ip":"20.83.49.34","events":2,"country_code":"US","country":"United States","org":"Microsoft Corporation","rdns":"azpdcgdx5mvy.stretchoid.com","scanner_tag":{"key":"stretchoid","label":"Stretchoid","category":"commercial","url":"https://stretchoid.com"}},{"ip":"172.202.118.38","events":2,"country_code":"US","country":"United States","org":"Microsoft Corporation","rdns":"azpdcsc1adjh.stretchoid.com","scanner_tag":{"key":"stretchoid","label":"Stretchoid","category":"commercial","url":"https://stretchoid.com"}},{"ip":"40.124.174.138","events":2,"country_code":"US","country":"United States","org":"Microsoft Corporation","rdns":"azpdsgqc0d6b.stretchoid.com","scanner_tag":{"key":"stretchoid","label":"Stretchoid","category":"commercial","url":"https://stretchoid.com"}},{"ip":"20.84.119.5","events":2,"country_code":"US","country":"United States","org":"Microsoft Corporation","rdns":"azpdesffb6om.stretchoid.com","scanner_tag":{"key":"stretchoid","label":"Stretchoid","category":"commercial","url":"https://stretchoid.com"}}],"top_asns":[{"asn":8075,"org":"Microsoft Corporation","events":494,"ips":428},{"asn":60064,"org":"Hostpalace Datacenters Ltd","events":12,"ips":1},{"asn":135377,"org":"UCLOUD INFORMATION TECHNOLOGY HK LIMITED","events":1,"ips":1}],"fingerprints":{"ja4h":["ge11nn0400_88d30a62b7ad","po11nn0500_b4ba55311b46","po11nn0600_5aaf82b7b36c","ge11nn0300_0db47b7d240d"],"ja4":["t12i130500_2d7513195f68_e51b7354d87f","t13i250900_b78ed14e2fd0_e7c285222651"]},"sample_paths":["/developmentserver/metadatauploader","/developmentserver/metadatauploader?CONTENTTYPE=MODEL&CLIENT=1"],"timeline":[{"day":"2026-04-29","events":3,"ips":3},{"day":"2026-05-01","events":3,"ips":3},{"day":"2026-05-02","events":3,"ips":3},{"day":"2026-05-03","events":3,"ips":3},{"day":"2026-05-04","events":8,"ips":8},{"day":"2026-05-05","events":8,"ips":8},{"day":"2026-05-06","events":7,"ips":7},{"day":"2026-05-07","events":7,"ips":7},{"day":"2026-05-08","events":1,"ips":1},{"day":"2026-05-09","events":8,"ips":8},{"day":"2026-05-10","events":8,"ips":8},{"day":"2026-05-11","events":8,"ips":8},{"day":"2026-05-12","events":8,"ips":8},{"day":"2026-05-13","events":5,"ips":5},{"day":"2026-05-14","events":6,"ips":6},{"day":"2026-05-15","events":6,"ips":6},{"day":"2026-05-16","events":8,"ips":8},{"day":"2026-05-17","events":6,"ips":6},{"day":"2026-05-18","events":6,"ips":6},{"day":"2026-05-19","events":5,"ips":5},{"day":"2026-05-20","events":3,"ips":3},{"day":"2026-05-21","events":4,"ips":4},{"day":"2026-05-22","events":6,"ips":6},{"day":"2026-05-23","events":5,"ips":5},{"day":"2026-05-24","events":5,"ips":5},{"day":"2026-05-25","events":3,"ips":3},{"day":"2026-05-26","events":2,"ips":2},{"day":"2026-05-27","events":5,"ips":5},{"day":"2026-05-28","events":5,"ips":5},{"day":"2026-05-29","events":7,"ips":7},{"day":"2026-05-30","events":6,"ips":6},{"day":"2026-05-31","events":4,"ips":4},{"day":"2026-06-01","events":3,"ips":3},{"day":"2026-06-02","events":7,"ips":7},{"day":"2026-06-03","events":8,"ips":8},{"day":"2026-06-04","events":7,"ips":7},{"day":"2026-06-05","events":6,"ips":6},{"day":"2026-06-06","events":3,"ips":3},{"day":"2026-06-07","events":5,"ips":5},{"day":"2026-06-08","events":2,"ips":2},{"day":"2026-06-09","events":5,"ips":5},{"day":"2026-06-10","events":7,"ips":7},{"day":"2026-06-11","events":6,"ips":6},{"day":"2026-06-12","events":4,"ips":4},{"day":"2026-06-13","events":7,"ips":7},{"day":"2026-06-14","events":5,"ips":5},{"day":"2026-06-15","events":5,"ips":5},{"day":"2026-06-16","events":6,"ips":6},{"day":"2026-06-17","events":6,"ips":6},{"day":"2026-06-18","events":3,"ips":3},{"day":"2026-06-19","events":3,"ips":3},{"day":"2026-06-20","events":7,"ips":7},{"day":"2026-06-21","events":6,"ips":6},{"day":"2026-06-22","events":4,"ips":4},{"day":"2026-06-23","events":6,"ips":6},{"day":"2026-06-24","events":3,"ips":3},{"day":"2026-06-25","events":7,"ips":7},{"day":"2026-06-26","events":6,"ips":6},{"day":"2026-06-27","events":4,"ips":4},{"day":"2026-06-28","events":3,"ips":3},{"day":"2026-06-29","events":6,"ips":6},{"day":"2026-06-30","events":7,"ips":7},{"day":"2026-07-01","events":7,"ips":7},{"day":"2026-07-02","events":4,"ips":4},{"day":"2026-07-03","events":2,"ips":2},{"day":"2026-07-04","events":7,"ips":7},{"day":"2026-07-05","events":6,"ips":6},{"day":"2026-07-06","events":7,"ips":7},{"day":"2026-07-08","events":7,"ips":7},{"day":"2026-07-09","events":7,"ips":7},{"day":"2026-07-10","events":6,"ips":6},{"day":"2026-07-11","events":20,"ips":9},{"day":"2026-07-13","events":12,"ips":12},{"day":"2026-07-14","events":8,"ips":8},{"day":"2026-07-15","events":4,"ips":4},{"day":"2026-07-16","events":6,"ips":6},{"day":"2026-07-17","events":4,"ips":4},{"day":"2026-07-18","events":12,"ips":12},{"day":"2026-07-19","events":5,"ips":5},{"day":"2026-07-20","events":7,"ips":7},{"day":"2026-07-21","events":8,"ips":8},{"day":"2026-07-22","events":4,"ips":4},{"day":"2026-07-23","events":8,"ips":8},{"day":"2026-07-24","events":4,"ips":4},{"day":"2026-07-25","events":8,"ips":8},{"day":"2026-07-26","events":8,"ips":8},{"day":"2026-07-27","events":4,"ips":4},{"day":"2026-07-28","events":3,"ips":3}],"window_hours":2160}