Indicators are what attackers leave behind. Stolen credentials are what they arrive with.
2 IOCs
More Than The Sum of its Parts: Combining EASM and Pentesting
Excerpt
In late April 2025, SAP released an emergency patch for a critical vulnerability in SAP NetWeaver, sending security teams across Europe scrambling to assess their exposure. The flaw, CVE-2025-31324 , was rated critically severe, and the details that followed made clear why. Media reports quickly revealed the full scope. SAP NetWeaver Visual Composer allowed unauthenticated malicious file uploads through a specific HTTP API endpoint (/developmentserver/metadatauploader). Even…
Read the original report →Attack Flow6 steps · MITRE ATT&CK mapped
Indicators of Compromise
Open the mindmap →2 indicators
| Type | Indicator | Confidence | Score | First Seen |
|---|---|---|---|---|
| CVE | CVE-2025-31324 | Medium | Score 54/100 | First seen |
| CVE | CVE-2025-42999 | Medium | Score 51/100 | First seen |
IOC Relationship Graph
Building graph…