CVE-2026-0513

Due to an Open Redirect Vulnerability in SAP Supplier Relationship Management SICF Handler in SRM Catalog, an unauthenticated attacker could craft a malicious URL that, if accessed by a victim, redirects them to an attacker-controlled site.This causes low impact on integrity of the application...

CVE-2026-0513

Due to an Open Redirect Vulnerability in SAP Supplier Relationship Management SICF Handler in SRM Catalog, an unauthenticated attacker could craft a malicious URL that, if accessed by a victim, redirects them to an attacker-controlled site.This causes low impact on integrity of the application...

EUVD-2016-7547

Malware in sbrugna...

EUVD-2016-7546

Malware in sbrugna...

EUVD-2016-0933

Malware in sbrugna...

EUVD-2018-14304

Malware in sbrugna...

EUVD-2015-0526

Malware in sbrugna...

EUVD-2015-0528

Malware in sbrugna...

EUVD-2016-7545

Malware in sbrugna...

EUVD-2016-0902

Malware in sbrugna...

EUVD-2017-3114

Malware in sbrugna...

EUVD-2017-16982

Malware in sbrugna...

EUVD-2018-14303

Malware in sbrugna...

EUVD-2016-7551

Malware in sbrugna...

EUVD-2017-16977

Malware in sbrugna...

EUVD-2021-8796

Malicious code in bioql PyPI...

PT-2025-36552

Name of the Vulnerable Software and Affected Versions: SAP Supplier Relationship Management affected versions not specified Description: A Cross-Site Scripting XSS vulnerability exists in SAP Supplier Relationship Management. An unauthenticated attacker can create a malicious link and, if clicked...

CVE-2025-30018

The Live Auction Cockpit in SAP Supplier Relationship Management SRM allows an unauthenticated attacker to submit an application servlet request with a crafted XML file which when parsed, enables the attacker to access sensitive files and data. This vulnerability has a high impact on the...

CVE-2025-30011

The Live Auction Cockpit in SAP Supplier Relationship Management SRM uses a deprecated java applet component within the affected SRM packages which allows an unauthenticated attacker to send an malicious request to the application, which could disclose the internal version details of the affected...

CVE-2025-30009

he Live Auction Cockpit in SAP Supplier Relationship Management SRM uses a deprecated java applet component within the affected SRM packages which allows an unauthenticated attacker to execute malicious script in the victim�s browser. This vulnerability has low impact on confidentiality and...