Sap Supplier Relationship Management
Approved changes feed: RSS · Atom
cpe:2.3:a:sap_se:sap_supplier_relationship_management:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Sap Se (f8f3f5db-c060-5230-a8bd-f91674203607) |
|---|---|
| Product | Sap Supplier Relationship Management (d85949ff-7372-53da-9f97-be7fc86a0d47) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2025-42920 |
vulnerable | 2026-06-08 07:25:08.420422 |
Cross-Site Scripting (XSS) vulnerability in SAP Supplier Relationship Management
MEDIUM (6.1)
Due to a Cross-Site Scripting (XSS) vulnerability in the SAP Supplier Relationship Management, an unauthenticated attacker could generate a malicious link and make it publicly accessible. If an authenticated victim clicks on the link, the injected input is processed during the page generation, resulting in the execution of malicious content. This execution allows the attacker to access and modify information within the victim's browser scope, impacting confidentiality and integrity, while availability remains unaffected.
Published: 2025-09-09T02:09:30.802Z
Updated: 2025-09-09T13:35:03.093Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-42910 |
vulnerable | 2026-06-08 07:25:08.398285 |
Unrestricted File Upload Vulnerability in SAP Supplier Relationship Management
CRITICAL (9)
Due to missing verification of file type or content, SAP Supplier Relationship Management allows an authenticated attacker to upload arbitrary files. These files could include executables which might be downloaded and executed by the user which could host malware. On successful exploitation an attacker could cause high impact on confidentiality, integrity and availability of the application.
Published: 2025-10-14T00:18:21.887Z
Updated: 2026-02-26T17:47:43.920Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-39436 |
vulnerable | 2026-06-08 06:09:37.439508 |
Information Disclosure in SAP Supplier Relationship Management
MEDIUM (5.8)
SAP Supplier Relationship Management -versions 600, 602, 603, 604, 605, 606, 616, 617, allows an unauthorized attacker to discover information relating to SRM within Vendor Master Data for Business Partners replication functionality.This information could be used to allow the attacker to specialize their attacks against SRM.
Published: 2023-08-08T00:48:18.892Z
Updated: 2024-10-15T20:13:19.519Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.