Approved changes feed: RSS · Atom

cpe:2.3:a:sap_se:sap_s/4_hana_(learning_solution):*:*:*:*:*:*:*:*

part: a version: * update: *

VendorSap Se (f8f3f5db-c060-5230-a8bd-f91674203607)
ProductSap S/4 Hana (Learning Solution) (d1a0089c-638a-553b-adfe-6fff25bf8be9)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-31328 vulnerable 2026-06-08 07:17:02.749004 Cross-Site Request Forgery (CSRF) vulnerability in SAP S/4 HANA (Learning Solution)
MEDIUM (4.6)
SAP Learning Solution is vulnerable to Cross-Site Request Forgery (CSRF), allowing an attacker to trick authenticated user into sending unintended requests to the server. GET-based OData function is named in a way that it violates the expected behaviour. This issue could impact both the confidentiality and integrity of the application without affecting the availability.
Published: 2025-04-22T18:25:55.117Z
Updated: 2025-04-23T15:58:47.132Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.