Description
SAP Supplier Relationship Management (Master Data Management Catalogue) allows an unauthenticated attacker to execute malicious scripts in the application, potentially leading to a Cross-Site Scripting (XSS) vulnerability. This has no impact on the availability of the application, but it can have some minor impact on its confidentiality and integrity.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| SAP_SE | SAP Supplier Relationship Management (Master Data Management Catalog) | SRM_MDM_CAT 7.52 | — |
Advisories 2
- WID-SEC-2025-1002 SAP Patchday Mai 2025: Mehrere Schwachstellen BSI CERT-Bund (WID) · May 13, 2025
- NCSC-2025-0149 Kwetsbaarheden verholpen in SAP producten NCSC-NL (Netherlands) · May 13, 2025