CVE-2025-30009
he Live Auction Cockpit in SAP Supplier Relationship Management (SRM) uses a deprecated java applet component within the affected SRM packages which allows an unauthenticated attacker to execute malicious script in the victim�s browser. This vulnerability has low impact on confidentiality and integrity within the scope of that victim�s browser, with no effect on availability of the application
Vendor
Product
CWE
Yayın Tarihi
2025-05-13 01:15:47
Güncelleme
2025-10-23 17:00:46
Source Identifier
cna@sap.com
KEV Date Added
-