Supplier Relationship Management
Approved changes feed: RSS · Atom
cpe:2.3:a:sap:supplier_relationship_management:7.0:-:*:*:*:*:*:*
part: a version: 7.0 update: -
| Vendor | Sap (dd5aa0c0-20b0-5c86-a937-aa29f1a33b77) |
|---|---|
| Product | Supplier Relationship Management (b3719e77-1ea3-5628-a238-c375a2b93db9) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2025-42920 |
vulnerable | 2026-06-08 07:25:08.421535 |
Cross-Site Scripting (XSS) vulnerability in SAP Supplier Relationship Management
MEDIUM (6.1)
Due to a Cross-Site Scripting (XSS) vulnerability in the SAP Supplier Relationship Management, an unauthenticated attacker could generate a malicious link and make it publicly accessible. If an authenticated victim clicks on the link, the injected input is processed during the page generation, resulting in the execution of malicious content. This execution allows the attacker to access and modify information within the victim's browser scope, impacting confidentiality and integrity, while availability remains unaffected.
Published: 2025-09-09T02:09:30.802Z
Updated: 2025-09-09T13:35:03.093Z Reference links |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.