Security Advisory

CVE-2026-0512

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2026-04-14 00:06:08

Last updated 2026-04-14 13:14:19

Assigner sap

State PUBLISHED

Description

Due to a Cross-Site Scripting (XSS) vulnerability in the SAP Supplier Relationship Management (SICF Handler in SRM Catalog), an unauthenticated attacker could craft a malicious URL, that if accessed by a victim, results in execution of malicious content within the victims browser. This could allow the attacker to access and modify information, impacting the confidentiality and integrity of the application, while availability remains unaffected.

← Browse all CVEs View on cve.org ↗