SAP Supplier Relationship Management (Master Data Management Catalog - SRM_MDM_CAT, before versions 3.73, 7.31, 7.32) does not sufficiently encode user-controlled inputs, resulting in Cross-Site Scripting (XSS) vulnerability.
CPE | Name | Operator | Version |
---|---|---|---|
supplier_relationship_management | eq | 7.31 | |
supplier_relationship_management | eq | 7.32 | |
supplier_relationship_management | eq | 3.73 |