CVE-2025-31327

OData meta-data property entity tampering in SAP Field Logistics

State: Published
Severity: 4.3 Medium
Published: Apr 22, 2025
Updated: Apr 23, 2025
Reserved: Mar 27, 2025

Description

SAP Field Logistics Manage Logistics application OData meta-data property is vulnerable to data tampering, due to which certain fields could be externally modified by an attacker causing low impact on integrity of the application. Confidentiality and availability are not impacted.

Scores

CVSS	Score	Vector	Source
3.1	4.3 Medium	CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N	sap

Weaknesses

CWE-472 External Control of Assumed-Immutable Web Parameter

Affected Products

Product	Versions
SAP Field LogisticsSAP_SE	S4CORE 107Affected 108Affected

References

https://me.sap.com/notes/3359825
https://url.sap/sapsecuritypatchday

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.