CVE-2023-39436

SAP Supplier Relationship Management -versions 600, 602, 603, 604, 605, 606, 616, 617, allows an unauthorized attacker to discover information relating to SRM within Vendor Master Data for Business Partners replication functionality.This information could be used to allow the attacker to specialize their attacks against SRM.

Score

CVSS 3.1 5.8 Medium

Status

Modified - cna@sap.com

Published

2023-08-08

Last modified

2024-10-15

Weaknesses

CWE-306

Affected products

• Supplier Relationship Management (Sap)
• Sap Supplier Relationship Management (Sap Se)

References

• https://me.sap.com/notes/2067220
• https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html