HoneyLabs
Lookup
Explore
CVEsEarly actorsPayloadsCampaignsEmissions IndexPortsUser-agents
Integrations
OverviewMCPFeedsAPI / EnrichSplunkMicrosoft SentinelElasticMISPOpenCTICrowdSec
PricingDocsBlog

CVE-2025-31324: SAP NetWeaver Visual Composer Metadata Uploader - Deserialization

HoneyLabs honeypots recorded 16 probes matching CVE-2025-31324 from 16 distinct source IP addresses in the last 7 days. Severity is rated critical.

This CVE is on CISA's Known Exploited Vulnerabilities list.

Request paths that identify it

  • /developmentserver/metadatauploader

Addresses probing it

Source IPProbesNetworkCountry
4.148.240.1801Microsoft CorporationUnited States
9.234.42.91Microsoft CorporationUnited States
172.174.201.581Microsoft CorporationUnited States
172.180.64.951Microsoft CorporationUnited States
40.124.114.1631Microsoft CorporationUnited States
20.64.98.411Microsoft CorporationUnited States
40.80.203.41Microsoft CorporationUnited States
20.29.43.1531Microsoft CorporationUnited States

Networks it comes from

ASNOrganisationProbesSource IPs
AS8075Microsoft Corporation1616

Captured requests

  • /developmentserver/metadatauploader

HTTP client fingerprints (JA4H)

  • ge11nn0400_88d30a62b7ad

CVE report

CVE report

Open a specific CVE from the CVE tracker.