HoneyLabs
Lookup
Explore
CVEsEarly actorsPayloadsCampaignsEmissions IndexPortsUser-agentsUDP traffic
Integrations
OverviewMCPFeedsAPI / EnrichSplunkMicrosoft SentinelElasticMISPOpenCTICrowdSec
PricingDocsBlog

CVE-2025-31324: SAP NetWeaver Visual Composer Metadata Uploader - Deserialization

HoneyLabs honeypots recorded 51 probes matching CVE-2025-31324 from 50 distinct source IP addresses in the last 7 days. Severity is rated critical.

This CVE is on CISA's Known Exploited Vulnerabilities list. CISA added it on 2025-04-29.

Request paths that identify it

  • /developmentserver/metadatauploader

Addresses probing it

Source IPProbesNetworkCountry
20.121.114.1832Microsoft Corporation · commercial scanner: StretchoidUnited States
134.33.65.671Microsoft Corporation · commercial scanner: StretchoidUnited States
134.33.97.1051Microsoft Corporation · commercial scanner: StretchoidUnited States
135.119.112.2291Microsoft CorporationUnited States
135.119.20.361Microsoft CorporationUnited States
172.203.251.1621Microsoft Corporation · commercial scanner: StretchoidUnited States
172.208.8.471Microsoft Corporation · commercial scanner: StretchoidUnited States
172.210.9.2201Microsoft Corporation · commercial scanner: StretchoidUnited States

Networks it comes from

ASNOrganisationProbesSource IPs
AS8075Microsoft Corporation5150

Where it comes from

CountryProbes
United States51

Captured requests

  • /developmentserver/metadatauploader

HTTP client fingerprints

  • b11cun040_00040016_aa48e2c8

CVE report

CVE report

Open a specific CVE from the CVE tracker.