The vulnerability in SAP NetWeaver Enterprise Portal Administration allows a privileged user to upload arbitrary content that, when deserialized, may compromise the confidentiality, integrity, and availability of the host system. The insecure deserialization flaw (CWE‑502) can enable an attacker to execute arbitrary code or otherwise manipulate the application state, leading to high‑impact system compromise.

All installations of SAP NetWeaver Enterprise Portal Administration are potentially affected, as no specific product versions are listed. The issue applies to any environment where privileged users can upload content that is subsequently deserialized by the portal management processes.

With a CVSS score of 9.1, the vulnerability is considered critical. However, the current EPSS score indicates a low likelihood of exploitation (<1%). The flaw requires a privileged user to upload malicious content, implying that the attack vector is more likely to be local or insider rather than remote. The vulnerability is not listed in the CISA KEV catalog, so it is not known to be actively exploited in the wild.