What’s Vulnerable › Vulnerabilities
CVE-2025-31333: Odata meta-data tampering in SAP S4CORE entity
- Severity: medium (CVSS 4.3 v3.1)
- Exploited in the wild: not listed in CISA KEV
- EPSS: 0.3% probability of exploitation in the next 30 days
- Public exploit or detection template: none known
- Published: 2025-04-08 · updated 2026-06-17
- Weakness: CWE-472
Description
SAP S4CORE OData meta-data property is vulnerable to data tampering, due to which entity set could be externally modified by an attacker causing low impact on integrity of the application. Confidentiality and availability is not impacted.
Affected products
- SAP_SE SAP S4CORE entity: S4CORE 107, 108
References
Get alerted when CVE-2025-31333 or the next vulnerability affects your stack