Supplier Relationship Management (Sap) - vulnerabilities (CVEs)
11 CVEs, 0 in the last 30 days, 19 known versions, newest CVE from 2026-01-13. Vendor: Sap.
CVEs of Supplier Relationship Management
- CVE-2026-0513 - CVSS 4.7 (medium), 2026-01-13: Due to an Open Redirect Vulnerability in SAP Supplier Relationship Management (SICF Handler in SRM Catalog), an unauthenticated attacker could craft a…
- CVE-2025-42920 - CVSS 6.1 (medium), 2025-09-09: Due to a Cross-Site Scripting (XSS) vulnerability in the SAP Supplier Relationship Management, an unauthenticated attacker could generate a malicious link and…
- CVE-2025-30009 - CVSS 6.1 (medium), 2025-05-13: he Live Auction Cockpit in SAP Supplier Relationship Management (SRM) uses a deprecated java applet component within the affected SRM packages which allows an…
- CVE-2025-30012 - CVSS 10 (critical), 2025-05-13: The Live Auction Cockpit in SAP Supplier Relationship Management (SRM) uses a deprecated java applet component, which allows an unauthenticated attacker to…
- CVE-2025-30011 - CVSS 5.3 (medium), 2025-05-13: The Live Auction Cockpit in SAP Supplier Relationship Management (SRM) uses a deprecated java applet component within the affected SRM packages which allows…
- CVE-2025-30010 - CVSS 6.1 (medium), 2025-05-13: The Live Auction Cockpit in SAP Supplier Relationship Management (SRM) uses a deprecated java applet component within the affected SRM packages which allows…
- CVE-2025-30018 - CVSS 8.6 (high), 2025-05-13: The Live Auction Cockpit in SAP Supplier Relationship Management (SRM) allows an unauthenticated attacker to submit an application servlet request with a…
- CVE-2023-39436 - CVSS 5.8 (medium), 2023-08-08: SAP Supplier Relationship Management -versions 600, 602, 603, 604, 605, 606, 616, 617, allows an unauthorized attacker to discover information relating to SRM…
- CVE-2019-0361 - CVSS 6.1 (medium), 2019-09-10: SAP Supplier Relationship Management (Master Data Management Catalog - SRM_MDM_CAT, before versions 3.73, 7.31, 7.32) does not sufficiently encode…
- CVE-2014-4161 - CVSS 4.3 (medium), 2014-06-13: Cross-site scripting (XSS) vulnerability in la/umTestSSO.jsp in SAP Supplier Relationship Management (SRM) allows remote attackers to inject arbitrary web…
- CVE-2014-4159 - CVSS 5.8 (medium), 2014-06-13: Open redirect vulnerability in in la/umTestSSO.jsp in SAP Supplier Relationship Management (SRM) allows remote attackers to redirect users to arbitrary web…
