HoneyLabs
Lookup
Explore
CVEsEarly actorsPayloadsCampaignsEmissions IndexPortsUser-agents
Integrations
OverviewMCPFeedsAPI / EnrichSplunkMicrosoft SentinelElasticMISPOpenCTICrowdSec
PricingDocsBlog

CVE-2025-31324: SAP NetWeaver Visual Composer Metadata Uploader - Deserialization

HoneyLabs honeypots recorded 19 probes matching CVE-2025-31324 from 19 distinct source IP addresses in the last 7 days. Severity is rated critical.

This CVE is on CISA's Known Exploited Vulnerabilities list.

Request paths that identify it

  • /developmentserver/metadatauploader

Addresses probing it

Source IPProbesNetworkCountry
52.248.41.2361Microsoft CorporationUnited States
20.106.59.1911Microsoft CorporationUnited States
52.248.42.671Microsoft CorporationUnited States
20.150.197.1971Microsoft CorporationUnited States
4.150.202.1791Microsoft CorporationUnited States
172.169.234.2101Microsoft CorporationUnited States
20.83.45.831Microsoft CorporationUnited States
20.150.211.2311Microsoft CorporationUnited States

Networks it comes from

ASNOrganisationProbesSource IPs
AS8075Microsoft Corporation1919

Captured requests

  • /developmentserver/metadatauploader

HTTP client fingerprints (JA4H)

  • ge11nn0400_88d30a62b7ad

CVE report

CVE report

Open a specific CVE from the CVE tracker.