The vulnerability of the OData function in the SAP S/4HANA software platform allows attackers to influence the integrity and confidentiality of the protected information.

The vulnerability of the OData function in the SAP S/4HANA software platform is related to the falsification of cross-site requests. Exploiting this vulnerability could allow a malicious actor to influence the integrity and confidentiality of the protected information...

CVE-2025-31328: Cross-Site Request Forgery (CSRF)

SAP Learning Solution is vulnerable to Cross-Site Request Forgery CSRF, allowing an attacker to trick authenticated user into sending unintended requests to the server. GET-based OData function is named in a way that it violates the expected behaviour. This issue could impact both the...