CVE-2025-30009

概要

参考情報

• me.sap.com/notes/3578900 · Permissions Required
• url.sap/sapsecuritypatchday · Not Applicable

supplier relationship management のその他の脆弱性

• CVE-2026-0513中 4.7Due to an Open Redirect Vulnerability in SAP Supplier Relationship Management (SICF Handler in SRM Catalog), an unauthenticated attacker cou…
• CVE-2025-42920中 6.1Due to a Cross-Site Scripting (XSS) vulnerability in the SAP Supplier Relationship Management, an unauthenticated attacker could generate a …
• CVE-2025-30018高 7.5The Live Auction Cockpit in SAP Supplier Relationship Management (SRM) allows an unauthenticated attacker to submit an application servlet r…
• CVE-2025-30012緊急 9.8The Live Auction Cockpit in SAP Supplier Relationship Management (SRM) uses a deprecated java applet component, which allows an unauthentica…
• CVE-2025-30011中 5.3The Live Auction Cockpit in SAP Supplier Relationship Management (SRM) uses a deprecated java applet component within the affected SRM packa…