EUVD-2026-22148

Due to missing authorization checks in the SAP S/4HANA OData Service Manage Technical Object Structures, an attacker could update and delete child entities via exposed OData services without proper authorization. This vulnerability results in a low impact on integrity, while confidentiality and...

SAP S/4HANA OData Service 安全漏洞

The SAP S/4HANA OData Service is an enterprise system data interface and service integration component provided by SAP, a German company. There is a security vulnerability in the SAP S/4HANA OData Service Manage Reference Equipment, which stems from the lack of authorization checks. This...

SAP S/4HANA OData Service 安全漏洞

The SAP S/4HANA OData Service is an enterprise system data interface and service integration component provided by SAP, a German company. There is a security vulnerability in the SAP S/4HANA OData Service. This vulnerability stems from the lack of authorization checks, which may lead to...

Malicious code in @f5rest/odata-v4-service-metadata (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3183cb83976cbb4d5011bae853bc65c285e5204ca17b1435d5ce6801dcfd9e2a The package @f5rest/odata-v4-service-metadata was found to contain malicious code...

MAL-2026-1623 Malicious code in @f5rest/odata-v4-service-metadata (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3183cb83976cbb4d5011bae853bc65c285e5204ca17b1435d5ce6801dcfd9e2a The package @f5rest/odata-v4-service-metadata was found to contain malicious code...

Malicious code in @f5rest/odata-v4-server (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 34696bd2c7207574311745e28bb00c41c683bef6c9843edc69042a47081df10b The package @f5rest/odata-v4-server was found to contain malicious code...

MAL-2026-1622 Malicious code in @f5rest/odata-v4-server (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 34696bd2c7207574311745e28bb00c41c683bef6c9843edc69042a47081df10b The package @f5rest/odata-v4-server was found to contain malicious code...

MAL-2026-1621 Malicious code in @f5rest/odata-v4-parser (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b6c0d3534cf1970619de7e95adb567342da4b367ca00683ce7e8a0e723bb6d57 The package @f5rest/odata-v4-parser was found to contain malicious code...

Malicious code in @f5rest/odata-v4-parser (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b6c0d3534cf1970619de7e95adb567342da4b367ca00683ce7e8a0e723bb6d57 The package @f5rest/odata-v4-parser was found to contain malicious code...

Malicious code in @f5rest/odata-v4-metadata (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6b451b98b071a1d7cb27b5486b71503e5611d52b987a3ded3f6ec15b556ce453 The package @f5rest/odata-v4-metadata was found to contain malicious code...

MAL-2026-1620 Malicious code in @f5rest/odata-v4-metadata (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6b451b98b071a1d7cb27b5486b71503e5611d52b987a3ded3f6ec15b556ce453 The package @f5rest/odata-v4-metadata was found to contain malicious code...

Malicious code in @f5rest/odata-v4-inmemory (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a9179dd00def504544f38e24e0c660bae5223aa9ad2681cc61ab72057e3ee14b The package @f5rest/odata-v4-inmemory was found to contain malicious code...

MAL-2026-1619 Malicious code in @f5rest/odata-v4-inmemory (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a9179dd00def504544f38e24e0c660bae5223aa9ad2681cc61ab72057e3ee14b The package @f5rest/odata-v4-inmemory was found to contain malicious code...

Malicious code in @f5rest/odata-lens (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8cc3c0ba56ae7cb9905be55c656786aa9987166dcad2e4d6e4d273134018c90e The package @f5rest/odata-lens was found to contain malicious code...

MAL-2026-1618 Malicious code in @f5rest/odata-lens (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8cc3c0ba56ae7cb9905be55c656786aa9987166dcad2e4d6e4d273134018c90e The package @f5rest/odata-lens was found to contain malicious code...

Malicious code in @f5rest/icr-odata-adapter (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 11d28fb3bbf60046908366ebaa32a43e76c4eaeb9646502ca526e1aa54332457 The package @f5rest/icr-odata-adapter was found to contain malicious code...

MAL-2026-1617 Malicious code in @f5rest/icr-odata-adapter (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 11d28fb3bbf60046908366ebaa32a43e76c4eaeb9646502ca526e1aa54332457 The package @f5rest/icr-odata-adapter was found to contain malicious code...

CVE-2023-29111

The SAP AIF ODATA service - versions 755, 756, discloses more detailed information than is required. An authorized attacker can use the collected information possibly to exploit the component. As a result, an attacker can cause a low impact on the confidentiality of the application...

CVE-2025-23191

Cached values belonging to the SAP OData endpoint in SAP Fiori for SAP ERP could be poisoned by modifying the Host header value in an HTTP GET request. An attacker could alter the atom:link values in the returned metadata redirecting them from the SAP server to a malicious link set by the attacke...

CVE-2021-27609

SAP Focused RUN versions 200, 300, does not perform necessary authorization checks for an authenticated user, which allows a user to call the oData service and manipulate the activation for the SAP EarlyWatch Alert service data collection and sending to SAP without the intended authorization...