Approved changes feed: RSS · Atom

cpe:2.3:a:sap_se:sap_supplier_relationship_management_(master_data_management_catalog):*:*:*:*:*:*:*:*

part: a version: * update: *

VendorSap Se (f8f3f5db-c060-5230-a8bd-f91674203607)
ProductSap Supplier Relationship Management (Master Data Management Catalog) (ee51fabd-b880-5b92-b5d2-a38430979d47)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-43006 vulnerable 2026-06-08 07:25:08.533589 Cross-Site Scripting (XSS) vulnerability in SAP Supplier Relationship Management (Master Data Management Catalog)
MEDIUM (6.1)
SAP Supplier Relationship Management (Master Data Management Catalogue) allows an unauthenticated attacker to execute malicious scripts in the application, potentially leading to a Cross-Site Scripting (XSS) vulnerability. This has no impact on the availability of the application, but it can have some minor impact on its confidentiality and integrity.
Published: 2025-05-13T00:19:01.711Z
Updated: 2025-05-13T14:00:06.955Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-25243 vulnerable 2026-06-08 07:12:50.880132 Path traversal vulnerability in SAP Supplier Relationship Management (Master Data Management Catalog)
HIGH (8.6)
SAP Supplier Relationship Management (Master Data Management Catalog) allows an unauthenticated attacker to use a publicly available servlet to download an arbitrary file over the network without any user interaction. This can reveal highly sensitive information with no impact to integrity or availability.
Published: 2025-02-11T00:38:02.558Z
Updated: 2025-02-18T18:03:33.640Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.