SR
Product
Supplier Relationship Management
11
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 1High 1Medium 7Low 0
Watch
Add Supplier Relationship Management to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2025-42920 | 6.1 | Sep 9 | Cross-Site Scripting (XSS) vulnerability in SAP Supplier Relationship Management Affected: 7.0 |
| CVE-2025-30010 | 6.1 | May 13 | The Live Auction Cockpit in SAP Supplier Relationship Management (SRM) uses a deprecated java applet component within the affected SRM packages which allows an unauthenticated… Affected: 7.14 |
| CVE-2025-30009 | 6.1 | May 13 | he Live Auction Cockpit in SAP Supplier Relationship Management (SRM) uses a deprecated java applet component within the affected SRM packages which allows an unauthenticated… Affected: 7.14 |
| CVE-2019-0361 | 6.1 | Sep 10 | SAP Supplier Relationship Management (Master Data Management Catalog - SRM_MDM_CAT, before versions 3.73, 7.31, 7.32) does not sufficiently encode user-controlled inputs,… Affected: 3.73; 7.31; 7.32 |
| CVE-2023-39436 | 5.8 | Aug 8 | SAP Supplier Relationship Management -versions 600, 602, 603, 604, 605, 606, 616, 617, allows an unauthorized attacker to discover information relating to SRM within Vendor Master… Affected: 600; 602; 603; 604; 605; 606; +2 more |
| CVE-2025-30011 | 5.3 | May 13 | The Live Auction Cockpit in SAP Supplier Relationship Management (SRM) uses a deprecated java applet component within the affected SRM packages which allows an unauthenticated… Affected: 7.14 |
| CVE-2026-0513 | 4.7 | Jan 13 | Open Redirect Vulnerability in SAP Supplier Relationship Management (SICF Handler in SRM Catalog) Affected: 700; 701; 702; 713; 714 |
Showing 7