CVE-2025-31333 — Odata meta-data tampering in SAP S4CORE entity

CVE-2025-31333

Odata meta-data tampering in SAP S4CORE entity PUBLISHED

Description (CNA)

SAP S4CORE OData meta-data property is vulnerable to data tampering, due to which entity set could be externally modified by an attacker causing low impact on integrity of the application. Confidentiality and availability is not impacted.

Affected (CNA)

Vendor / product	Versions
SAP_SE / SAP S4CORE entity	affected S4CORE 107; affected 108

CWE

CWE-472

References

https://me.sap.com/notes/3525971
https://url.sap/sapsecuritypatchday

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.