Sap Supplier Relationship Management (Sap Se) - vulnerabilities (CVEs)

3 CVEs, 0 in the last 30 days, 15 known versions, newest CVE from 2025-10-14. Vendor: Sap Se.

CVEs of Sap Supplier Relationship Management

• CVE-2025-42910 - CVSS 9 (critical), 2025-10-14: Due to missing verification of file type or content, SAP Supplier Relationship Management allows an authenticated attacker to upload arbitrary files. These…
• CVE-2025-42920 - CVSS 6.1 (medium), 2025-09-09: Due to a Cross-Site Scripting (XSS) vulnerability in the SAP Supplier Relationship Management, an unauthenticated attacker could generate a malicious link and…
• CVE-2023-39436 - CVSS 5.8 (medium), 2023-08-08: SAP Supplier Relationship Management -versions 600, 602, 603, 604, 605, 606, 616, 617, allows an unauthorized attacker to discover information relating to SRM…