Skip to content
OpenAdvisories
Unscored CVE-2019-0361 EUVD-2019-1134GHSA-x9hh-7xwv-27jh

SAP Supplier Relationship Management (Master Data Management Catalog - SRM_MDM_CAT, before versions 3.73, 7.31, 7.32) does not sufficiently…

Published Sep 10, 2019 · Updated Aug 4, 2024 · Assigned by sap

Vendor: SAP Product: SAP Supplier Relationship Management (Master Data Management Catalog) (SRM_MDM_CAT)

Description

SAP Supplier Relationship Management (Master Data Management Catalog - SRM_MDM_CAT, before versions 3.73, 7.31, 7.32) does not sufficiently encode user-controlled inputs, resulting in Cross-Site Scripting (XSS) vulnerability.

Affected products

VendorProductAffectedFixed
SAP SE SAP Supplier Relationship Management (Master Data Management Catalog) (SRM_MDM_CAT) < 3.73, < 7.31, < 7.32 —

References