SAP Knowledge Base Article - Public

3640063 - CVE-2025-31324 | How does this Vulnerability in SAP NetWeaver impact SuccessFactors?

Symptom

  • You received a vulnerability communication in which it announced an unauthenticated local file inclusion vulnerability in versions of SAP NetWeaver that use version 7.50 and earlier versions of Visual Composer Framework. SAP has issued an emergency patch.

  • You want to know if this impacts SAP SuccessFactors.

Environment

SAP SuccessFactors HCM

Resolution

Security Team has confirmed that this has no impact to SAP SuccessFactors whatsoever.

Keywords

Netweaver, vulnerability, SAP, SuccessFactors, CVE-2025-31324 , KBA , LOD-SF-PLT-PSI , Product Security Inquiries , Problem

Product

SAP SuccessFactors HCM Core 2505 ; SAP SuccessFactors Platform all versions