Lucene search
+L

1442 matches found

CNVD
CNVD
added 2025/05/19 12:0 a.m.8 views

SAP supplier relationship management input validation error vulnerability

SAP supplier relationship management is a supplier relationship management software developed by SAP Germany. An input validation error vulnerability exists in SAP supplier relationship management, which stems from the use of a deprecated Java applet component that can be exploited by an attacker...

6.1CVSS6AI score0.00288EPSS
SaveExploits0References1
CNVD
CNVD
added 2025/05/19 12:0 a.m.8 views

SAP supplier relationship management cross-site scripting vulnerability

SAP supplier relationship management is a supplier relationship management software developed by SAP Germany. A cross-site scripting vulnerability exists in SAP supplier relationship management, which stems from the use of a deprecated Java applet component that can be exploited by an attacker to...

6.1CVSS5.7AI score0.00295EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/05/15 1:11 a.m.30 views

CVE-2025-30012

The Live Auction Cockpit in SAP Supplier Relationship Management SRM uses a deprecated java applet component, which allows an unauthenticated attacker to send malicious payload request in a specific encoding format. The servlet will then decode this malicious request which will result in...

10CVSS6.8AI score0.00776EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/05/15 1:11 a.m.29 views

CVE-2025-30009

he Live Auction Cockpit in SAP Supplier Relationship Management SRM uses a deprecated java applet component within the affected SRM packages which allows an unauthenticated attacker to execute malicious script in the victim�s browser. This vulnerability has low impact on confidentiality and...

6.1CVSS7.2AI score0.00295EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/05/15 1:10 a.m.22 views

CVE-2025-30011

The Live Auction Cockpit in SAP Supplier Relationship Management SRM uses a deprecated java applet component within the affected SRM packages which allows an unauthenticated attacker to send an malicious request to the application, which could disclose the internal version details of the affected...

5.3CVSS7AI score0.00366EPSS
SaveExploits0References1
OSV
OSV
added 2025/05/13 1:15 a.m.8 views

CVE-2025-30010

The Live Auction Cockpit in SAP Supplier Relationship Management SRM uses a deprecated java applet component within the affected SRM packages which allows an unauthenticated attacker to craft a malicious link, which when clicked by a victim, redirects the browser to a malicious site. On successfu...

6.1CVSS5.8AI score0.00288EPSS
SaveExploits0References2
NVD
NVD
added 2025/05/13 1:15 a.m.19 views

CVE-2025-30010

The Live Auction Cockpit in SAP Supplier Relationship Management SRM uses a deprecated java applet component within the affected SRM packages which allows an unauthenticated attacker to craft a malicious link, which when clicked by a victim, redirects the browser to a malicious site. On successfu...

6.1CVSS0.00288EPSS
SaveExploits0References2
NVD
NVD
added 2025/05/13 1:15 a.m.44 views

CVE-2025-30012

The Live Auction Cockpit in SAP Supplier Relationship Management SRM uses a deprecated java applet component, which allows an unauthenticated attacker to send malicious payload request in a specific encoding format. The servlet will then decode this malicious request which will result in...

10CVSS0.00776EPSS
SaveExploits0References2
NVD
NVD
added 2025/05/13 1:15 a.m.15 views

CVE-2025-30011

The Live Auction Cockpit in SAP Supplier Relationship Management SRM uses a deprecated java applet component within the affected SRM packages which allows an unauthenticated attacker to send an malicious request to the application, which could disclose the internal version details of the affected...

5.3CVSS0.00366EPSS
SaveExploits0References2
OSV
OSV
added 2025/05/13 1:15 a.m.10 views

CVE-2025-30009

he Live Auction Cockpit in SAP Supplier Relationship Management SRM uses a deprecated java applet component within the affected SRM packages which allows an unauthenticated attacker to execute malicious script in the victim�s browser. This vulnerability has low impact on confidentiality and...

6.1CVSS5.9AI score0.00295EPSS
SaveExploits0References2
NVD
NVD
added 2025/05/13 1:15 a.m.19 views

CVE-2025-30009

he Live Auction Cockpit in SAP Supplier Relationship Management SRM uses a deprecated java applet component within the affected SRM packages which allows an unauthenticated attacker to execute malicious script in the victim�s browser. This vulnerability has low impact on confidentiality and...

6.1CVSS0.00295EPSS
SaveExploits0References2
OSV
OSV
added 2025/05/13 1:15 a.m.7 views

CVE-2025-30011

The Live Auction Cockpit in SAP Supplier Relationship Management SRM uses a deprecated java applet component within the affected SRM packages which allows an unauthenticated attacker to send an malicious request to the application, which could disclose the internal version details of the affected...

5.3CVSS5.8AI score0.00366EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2025/05/13 12:14 a.m.31 views

CVE-2025-30012 Multiple vulnerabilities in SAP Supplier Relationship Management (Live Auction Cockpit)

The Live Auction Cockpit in SAP Supplier Relationship Management SRM uses a deprecated java applet component, which allows an unauthenticated attacker to send malicious payload request in a specific encoding format. The servlet will then decode this malicious request which will result in...

10CVSS0.00776EPSS
SaveExploits0References2
CVE
CVE
added 2025/05/13 12:14 a.m.82 views

CVE-2025-30012

CVE-2025-30012 affects the SAP SRM Live Auction Cockpit component, where a deprecated Java applet enables an unauthenticated attacker to trigger deserialization of a crafted payload, leading to execution of arbitrary OS commands with SAP Administrator privileges. The cited impact is high on confi...

10CVSS6.8AI score0.00776EPSS
SaveExploits0References2Affected Software1
Vulnrichment
Vulnrichment
added 2025/05/13 12:14 a.m.10 views

CVE-2025-30012 Multiple vulnerabilities in SAP Supplier Relationship Management (Live Auction Cockpit)

The Live Auction Cockpit in SAP Supplier Relationship Management SRM uses a deprecated java applet component, which allows an unauthenticated attacker to send malicious payload request in a specific encoding format. The servlet will then decode this malicious request which will result in...

10CVSS9.7AI score0.00776EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2025/05/13 12:12 a.m.27 views

CVE-2025-30009 Multiple vulnerabilities in SAP Supplier Relationship Management (Live Auction Cockpit)

he Live Auction Cockpit in SAP Supplier Relationship Management SRM uses a deprecated java applet component within the affected SRM packages which allows an unauthenticated attacker to execute malicious script in the victim�s browser. This vulnerability has low impact on confidentiality and...

6.1CVSS0.00295EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2025/05/13 12:0 a.m.7 views

SAP Supplier Relationship Management 跨站脚本漏洞

SAP supplier relationship management is a supplier relationship management software developed by SAP Germany. A cross-site scripting vulnerability exists in SAP supplier relationship management, which stems from the use of a deprecated Java applet component that can be exploited by an attacker to...

6.1CVSS6.2AI score0.00295EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2025/05/13 12:0 a.m.9 views

SAP Supplier Relationship Management 代码问题漏洞

SAP Supplier Relationship Management SRM is a supplier relationship management solution from SAP, Germany. The product automates purchasing and acquisition processes within an organization as well as between suppliers, and provides functions such as invoicing. A code issue vulnerability exists in...

10CVSS9.3AI score0.00776EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2025/05/13 12:0 a.m.7 views

SAP Supplier Relationship Management 输入验证错误漏洞

SAP supplier relationship management is a supplier relationship management software developed by SAP Germany. An input validation error vulnerability exists in SAP supplier relationship management, which stems from the use of a deprecated Java applet component that can be exploited by an attacker...

6.1CVSS6.7AI score0.00288EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2025/05/13 12:0 a.m.7 views

SAP Supplier Relationship Management 安全漏洞

SAP supplier relationship management is a supplier relationship management software developed by SAP Germany. An information disclosure vulnerability exists in SAP supplier relationship management, which stems from the use of a deprecated Java applet component, and can be exploited by an attacker...

5.3CVSS6.2AI score0.00366EPSS
SaveExploits0References2
Rows per page
Query Builder