CVE-2025-23191CWE-644

Cache Poisoning through header manipulation vulnerability in SAP Fiori for SAP ERP

Low · published February 11, 2025

CVSS v3.1
3.1
EPSS
0%
Percentile
15.2
In the wild
Unconfirmed
What it is

Cached values belonging to the SAP OData endpoint in SAP Fiori for SAP ERP could be poisoned by modifying the Host header value in an HTTP GET request. An attacker could alter the `atom:link` values in the returned metadata redirecting them from the SAP server to a malicious link set by the attacker. Successful exploitation could cause low impact on integrity of the application.

The record
Technical detail
CVSS v3.1
3.1 · LOW
Vector
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:N
CVSS v4.0
Not supplied
EPSS
0.00248 · 15.2th percentile
Weakness
CWE-644 · Improper Neutralization of HTTP Headers for Scripting Syntax
Published
2025-02-11T00:35Z
EPSS history
Timeline
  • 11 FEB 00:35Z
    Cache Poisoning through header manipulation vulnerability in SAP Fiori for SAP ERP
    cvelistv5