CVE-2025-31327
OData meta-data property entity tampering in SAP Field Logistics
Vexday Risk Score
13Bajo
Decisión SSVC (CISA)
Track
Sin señal de explotación → monitorear
CVSS 4.3EPSS 0.2%KEV nãoPoC —Nuclei —Metasploit —Patch —
Ciclo de vida
22 abr 2025Publicada en NVD
Recomendación: Monitorear — sin señal de explotación por ahora.
SAP Field Logistics Manage Logistics application OData meta-data property is vulnerable to data tampering, due to which certain fields could be externally modified by an attacker causing low impact on integrity of the application. Confidentiality and availability are not impacted.
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
Productos afectados
SAP_SE · SAP Field Logistics¿Quieres saber si tu infraestructura está expuesta a esto?
Hablar con TrueHacking →