Known vulnerabilities in SAP Supplier Relationship Management

Known vulnerabilities in SAP Supplier Relationship Management

Vendor: SAP

Software: SAP Supplier Relationship Management

Software CPE: cpe:2.3:a:sap:sap_supplier_relationship_management:*:*:*:*:*:*:*:*

Website: https://www.sap.com/

Total vulnerabilities: 11

Public exploits: 0

Known exploited (KEV): 0

Highest CVSSv4 Score: 8.8

Breakdown by Severity Chart

Vulnerabilities (11)

Vulnerability	CWE-ID	CSH Severity	Public Exploit	KEV	First fixed release	Published	Bulletins
#VU125961 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2026-0512	CWE-79	Low	No	No	-	14.04.2026	SB2026041492
#VU121200 - URL Redirection to Untrusted Site ('Open Redirect') CVE-2026-0513	CWE-601	Low	No	No	-	13.01.2026	SB2026011342
#VU117340 - Unrestricted Upload of File with Dangerous Type CVE-2025-42910	CWE-434	Medium	No	No	-	17.10.2025	SB2025101731
#VU109031 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2025-43006	CWE-79	Low	No	No	-	13.05.2025	SB2025051333
#VU109022 - Exposure of sensitive information to an unauthorized actor CVE-2025-30009	CWE-200	Medium	No	No	-	13.05.2025	SB2025051329
#VU109023 - Exposure of sensitive information to an unauthorized actor CVE-2025-30010	CWE-200	Medium	No	No	-	13.05.2025	SB2025051329
#VU109024 - Exposure of sensitive information to an unauthorized actor CVE-2025-30011	CWE-200	Medium	No	No	-	13.05.2025	SB2025051329
#VU109025 - Exposure of sensitive information to an unauthorized actor CVE-2025-30012	CWE-200	Medium	No	No	-	13.05.2025	SB2025051329
#VU109021 - Exposure of sensitive information to an unauthorized actor CVE-2025-30018	CWE-200	Medium	No	No	-	13.05.2025	SB2025051329
#VU103766 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') CVE-2025-25243	CWE-22	High	No	No	-	11.02.2025	SB2025021150
#VU79290 - Exposure of sensitive information to an unauthorized actor CVE-2023-39436	CWE-200	Medium	No	No	-	09.08.2023	SB2023080935