SAP Supplier Relationship Management
9 notes since January 2023.
| Patch Day | Note | Title | Priority | CVSS |
|---|---|---|---|---|
| April 2026 | 3645228 | Cross-Site Scripting (XSS) vulnerability in SAP Supplier Relationship Management (SICF Handler in SRM Catalog) | Medium | 6.1 |
| January 2026 | 3638716 | Open Redirect Vulnerability in SAP Supplier Relationship Management (SICF Handler in SRM Catalog) | Medium | 4.7 |
| October 2025 | 3647332 | Unrestricted File Upload Vulnerability in SAP Supplier Relationship Management | Critical | 9.0 |
| September 2025 | 3647098 | Cross-Site Scripting (XSS) vulnerability in SAP Supplier Relationship Management | Medium | 6.1 |
| July 2025 | 3578900 | Multiple vulnerabilities in SAP Supplier Relationship Management (Live Auction Cockpit) | Critical | 10.0 |
| May 2025 | 3578900 | Multiple vulnerabilities in SAP Supplier Relationship Management (Live Auction Cockpit) | High | 8.6 |
| May 2025 | 3588455 | Cross-Site Scripting (XSS) vulnerability in SAP Supplier Relationship Management (Master Data Management Catalog) | Medium | 6.1 |
| February 2025 | 3567551 | Path traversal vulnerability in SAP Supplier Relationship Management (Master Data Management Catalog) | High | 8.6 |
| August 2023 | 2032723 | Switchable authorization checks for RFC in SRM | Medium | 6.3 |
| August 2023 | 2067220 | Information Disclosure in SAP Supplier Relationship Management | Medium | 5.8 |