Skip to content
OpenAdvisories
Medium · 5.8 CVE-2023-39436 EUVD-2023-43160GHSA-455r-7p7w-hg5r

Information Disclosure in SAP Supplier Relationship Management

Published Aug 8, 2023 · Updated Oct 15, 2024 · Assigned by sap

Description

SAP Supplier Relationship Management -versions 600, 602, 603, 604, 605, 606, 616, 617, allows an unauthorized attacker to discover information relating to SRM within Vendor Master Data for Business Partners replication functionality.This information could be used to allow the attacker to specialize their attacks against SRM.

Affected products

VendorProductAffectedFixed
SAP_SE SAP Supplier Relationship Management 600, 602, 603, 604, 605, 606, 616, 617 —

Advisories 1

References