What is CVE-2025-31333?

CVE-2025-31333 is a medium-severity vulnerability in Sap_se Sap S4core Entity, classified under CWE-472. CVSS score: 4.3/10. Published 2025-04-08.

How severe is CVE-2025-31333?

Medium severity. CVSS v3 base score is 4.3 out of 10.

Vulnerability in Sap_se Sap S4core Entity

CVE-2025-31333

SAP S4CORE OData meta-data property is vulnerable to data tampering, due to which entity set could be externally modified by an attacker causing low impact on integrity of the application. Confidentiality and availability is not impacted.

EPSS: 0.002 (16.1th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 4.3 (Medium). Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N.

Affected products

Sap_se Sap S4core Entity — versions S4CORE 107, 108

Weakness classification (CWE)

CWE-472

References

cna@sap.com
cna@sap.com

Frequently asked questions

What is CVE-2025-31333?: CVE-2025-31333 is a medium-severity vulnerability in Sap_se Sap S4core Entity, classified under CWE-472. CVSS score: 4.3/10. Published 2025-04-08.
How severe is CVE-2025-31333?: Medium severity. CVSS v3 base score is 4.3 out of 10.