CVE-2025-23191

Summary

CVE-2025-23191 is a vulnerability affecting SAP Fiori in SAP ERP systems. It allows an attacker to manipulate cached values in the SAP OData endpoint by altering the Host header value in an HTTP GET request. By doing so, the attacker can poison the `atom:link` values in the returned metadata, redirecting them to malicious links under their control. Successfully exploiting this vulnerability could result in a low impact on the application's integrity.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.