CVE-2025-31328 is a Cross-Site Request Forgery (CSRF) vulnerability in SAP Learning Solution, allowing attackers to trick authenticated users into executing unintended actions. This medium-severity flaw (CVSS 4.6) requires user interaction and authenticated access, potentially impacting data confidentiality and integrity. While there is no public exploit code or KEV listing, community discussion and media coverage suggest heightened awareness, with reports of exploitation targeting SAP S/4HANA, though the affected product for this specific CVE is SAP Learning Solution.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
| SAP SE | SAP S/4 HANA (Learning Solution) | 101, S4HCMGXX 100CNA affecteddefault unaffected |
CVSS version used by this source: 3.1
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N
The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.0 Bluesky, 0.0 Mastodon, and 0.1 GitHub mentions.
The average CVE in this peer group has 0.0 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.
Remediation records are not available for this CVE.