SAP SE SAP Supplier Relationship Management vulnerabilities
3 vulnerabilities
Known vulnerabilities in SAP SE SAP Supplier Relationship Management, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
MediumCVE-2025-42920sap_se · sap supplier relationship management +1 moreCross-Site Scripting (XSS) vulnerability in SAP Supplier Relationship ManagementDue to a Cross-Site Scripting (XSS) vulnerability in the SAP Supplier Relationship Management, an unauthenticated attacker could generate a malicious link and make it publicly accessible. If an authenticated victim clicks on the link, the injected input is processed during the page generation, resulting in the execution of malicious content. This execution allows the attacker to access and modify information within the victim's browser scope, impacting confidentiality and integrity, while availability remains unaffected.EPSS0.27%CriticalCVE-2025-42910sap_se · sap supplier relationship managementUnrestricted File Upload Vulnerability in SAP Supplier Relationship ManagementDue to missing verification of file type or content, SAP Supplier Relationship Management allows an authenticated attacker to upload arbitrary files. These files could include executables which might be downloaded and executed by the user which could host malware. On successful exploitation an attacker could cause high impact on confidentiality, integrity and availability of the application.EPSS0.48%MediumCVE-2023-39436sap_se · sap supplier relationship management +1 moreInformation Disclosure in SAP Supplier Relationship ManagementSAP Supplier Relationship Management -versions 600, 602, 603, 604, 605, 606, 616, 617, allows an unauthorized attacker to discover information relating to SRM within Vendor Master Data for Business Partners replication functionality.This information could be used to allow the attacker to specialize their attacks against SRM.EPSS0.44%