cve.2025-31324 | Detection.FYI

Potential Java WebShell Upload in SAP NetViewer Server

Jun 11, 2025 · attack.persistence attack.t1505.003 detection.emerging-threats cve.2025-31324 ·
Share on:

Detects potential Java webshell uploads via HTTP requests with Content-Type 'application/octet-stream' and Java file extensions. This behavior might indicate exploitation of vulnerabilities like CVE-2025-31324, which allows remote code execution through webshells in SAP NetViewer.

Read More
Potential SAP NetViewer Webshell Command Execution

Jun 11, 2025 · attack.persistence attack.t1505.003 attack.initial-access attack.t1190 detection.emerging-threats cve.2025-31324 ·
Share on:

Detects potential command execution via webshell in SAP NetViewer through JSP files with cmd parameter. This rule is created to detect exploitation of vulnerabilities like CVE-2025-31324, which allows remote code execution via a webshell.

Read More