Beveiligingsadvies

CVE-2025-30009

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2025-05-13 00:12:52

Laatst bijgewerkt 2025-05-13 14:06:31

Toegewezen door sap

CVSS-score 6.1

Status PUBLISHED

Beschrijving

he Live Auction Cockpit in SAP Supplier Relationship Management (SRM) uses a deprecated java applet component within the affected SRM packages which allows an unauthenticated attacker to execute malicious script in the victim�s browser. This vulnerability has low impact on confidentiality and integrity within the scope of that victim�s browser, with no effect on availability of the application

← Alle CVE's bekijken Bekijk op cve.org ↗