CVE-2025-30009 | Teknoloji dünyasından en güncel haberleri ve güvenlikle ilgili gelişmeleri takip edin.

he Live Auction Cockpit in SAP Supplier Relationship Management (SRM) uses a deprecated java applet component within the affected SRM packages which allows an u…
Medium CVSS: 6.1

CVE-2025-30009

he Live Auction Cockpit in SAP Supplier Relationship Management (SRM) uses a deprecated java applet component within the affected SRM packages which allows an unauthenticated attacker to execute malicious script in the victim�s browser. This vulnerability has low impact on confidentiality and integrity within the scope of that victim�s browser, with no effect on availability of the application
Vendor
Sap
Product
Supplier Relationship Management
CWE
CWE-79
Yayın Tarihi
2025-05-13 01:15:47
Güncelleme
2025-10-23 17:00:46
Source Identifier
cna@sap.com
KEV Date Added
-

Kategoriler

Referanslar