CVE-2025-23191 Cache Poisoning through header manipulation vulnerability in SAP Fiori for SAP ERP
| Reporter | Title | Published | Views | Family All 11 |
|---|---|---|---|---|
 | OData Protocol Cache Poisoning Session Interception | 17 Mar 202500:00 | – | bdu_fstec |
 | CVE-2025-23191 | 11 Feb 202501:11 | – | circl |
 | SAP Fiori 安全漏洞 | 10 Feb 202500:00 | – | cnnvd |
 | CVE-2025-23191 | 11 Feb 202500:35 | – | cve |
 | EUVD-2025-3137 | 3 Oct 202520:07 | – | euvd |
 | Vulnerabilities fixed in SAP products | 11 Feb 202509:08 | – | ncsc |
 | CVE-2025-23191 | 11 Feb 202501:15 | – | nvd |
 | PT-2025-6125 · Sap · Sap Fiori +1 | 11 Feb 202500:00 | – | ptsecurity |
 | CVE-2025-23191: Improper Neutralization of HTTP Headers for Scripting Syntax | 11 Feb 202500:00 | – | rapid7 |
 | CVE-2025-23191 | 9 Jan 202610:58 | – | redhatcve |
10
[
{
"defaultStatus": "unaffected",
"product": "SAP Fiori for SAP ERP",
"vendor": "SAP_SE",
"versions": [
{
"status": "affected",
"version": "SAP_GWFND 740"
},
{
"status": "affected",
"version": "750"
},
{
"status": "affected",
"version": "751"
},
{
"status": "affected",
"version": "752"
},
{
"status": "affected",
"version": "753"
},
{
"status": "affected",
"version": "754"
},
{
"status": "affected",
"version": "755"
},
{
"status": "affected",
"version": "756"
},
{
"status": "affected",
"version": "757"
},
{
"status": "affected",
"version": "758"
}
]
}
]| Source | Link |
|---|---|
| me | www.me.sap.com/notes/3426825 |
| url | www.url.sap/sapsecuritypatchday |
Data
Build on a solid foundation with Vulners data
We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data
Api
Power your application with Vulners API
The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access
App
Assess and manage vulnerabilities with Vulners tools
Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation
11 Feb 2025 00:35Current
CVSS 3.13.1
EPSS0.00248
SSVC