SAP Supplier Relationship Management
8 notes since January 2023.
Priority is derived from CVSS, not SAP’s priority: CVSS 9.0 or higher is Critical, 7.0 or higher High, 4.0 or higher Medium, below 4.0 Low. SAP’s own priority is only on SAP for Me (SAP login required).
| Patch Day | Note | Title | Priority (derived from CVSS, not SAP’s priority) | CVSS |
|---|---|---|---|---|
| April 2026 | 3645228 | Cross-Site Scripting (XSS) vulnerability in SAP Supplier Relationship Management (SICF Handler in SRM Catalog) | Medium | 6.1 |
| January 2026 | 3638716 | Open Redirect Vulnerability in SAP Supplier Relationship Management (SICF Handler in SRM Catalog) | Medium | 4.7 |
| October 2025 | 3647332 | Unrestricted File Upload Vulnerability in SAP Supplier Relationship Management | Critical | 9.0 |
| September 2025 | 3647098 | Cross-Site Scripting (XSS) vulnerability in SAP Supplier Relationship Management | Medium | 6.1 |
| May 2025 | 3578900 | Multiple vulnerabilities in SAP Supplier Relationship Management (Live Auction Cockpit) | Critical | 10.0 |
| May 2025 | 3588455 | Cross-Site Scripting (XSS) vulnerability in SAP Supplier Relationship Management (Master Data Management Catalog) | Medium | 6.1 |
| February 2025 | 3567551 | Path traversal vulnerability in SAP Supplier Relationship Management (Master Data Management Catalog) | High | 8.6 |
| August 2023 | 2067220 | Information Disclosure in SAP Supplier Relationship Management | Medium | 5.8 |