Supplier relationship management

This hub aggregates every CVE we track for Supplier relationship management, a product in the enterprise software space. Use it to gauge the current risk picture and drill into individual advisories.

Severity distribution

Monthly trend

The 11 most recently published vulnerabilities affecting Supplier relationship management.

• CVE-2026-0513Open Redirect Vulnerability in SAP Supplier Relationship Management (SICF Handler in SRM Catalog)4.7Jan 13, 2026
• CVE-2025-42920Cross-Site Scripting (XSS) vulnerability in SAP Supplier Relationship Management6.1Sep 9, 2025
• CVE-2025-30018Multiple vulnerabilities in SAP Supplier Relationship Management (Live Auction Cockpit)8.6May 13, 2025
• CVE-2025-30012Multiple vulnerabilities in SAP Supplier Relationship Management (Live Auction Cockpit)10.0May 13, 2025
• CVE-2025-30011Multiple vulnerabilities in SAP Supplier Relationship Management (Live Auction Cockpit)5.3May 13, 2025
• CVE-2025-30010Multiple vulnerabilities in SAP Supplier Relationship Management (Live Auction Cockpit)6.1May 13, 2025
• CVE-2025-30009Multiple vulnerabilities in SAP Supplier Relationship Management (Live Auction Cockpit)6.1May 13, 2025
• CVE-2023-39436Information Disclosure in SAP Supplier Relationship Management5.8Aug 8, 2023
• CVE-2019-0361SAP Supplier Relationship Management (Master Data Management Catalog - SRM_MDM_CAT, before versions 3.73, 7.31, 7.32) does not sufficiently encode user-controlled inputs, resulting in Cross-Site Sc...6.1Sep 10, 2019
• CVE-2014-4159Open redirect vulnerability in in la/umTestSSO.jsp in SAP Supplier Relationship Management (SRM) allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via ...5.8Jun 13, 2014
• CVE-2014-4161Cross-site scripting (XSS) vulnerability in la/umTestSSO.jsp in SAP Supplier Relationship Management (SRM) allows remote attackers to inject arbitrary web script or HTML via the url parameter.4.3Jun 13, 2014