CVE-2025-31328: SAP Learning Solution is vulnerable to Cross-Site Request Forgery (CSRF), allowing an attacker to trick authenticated user into sending unintended requests to…

PriorityP422medium4.6CVSS 3.1

AVNACLPRLUIRSUCLILAN

EPSS

0.13%

2.6th percentile

SAP Learning Solution is vulnerable to Cross-Site Request Forgery (CSRF), allowing an attacker to trick authenticated user into sending unintended requests to the server. GET-based OData function is named in a way that it violates the expected behaviour. This issue could impact both the confidentiality and integrity of the application without affecting the availability.

Affected

2 ranges

Vendor	Product	Version range	Fixed in
sap_se	sap_s_4_hana	—	—
sap_se	sap_s_4_hana	—	—

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.