SAP_SE SAP Supplier Relationship Management (Master Data Management Catalog)

2 published vulnerabilities name this product.

As the CNAs write it in their CVE records (vendor and product); the versions are theirs.

CVEVulnerable versionsTitleSeverityPublishedEPSSExploitation
CVE-2025-43006SRM_MDM_CAT 7.52Cross-Site Scripting (XSS) vulnerability in SAP Supplier Relationship Management (Master Data Management Catalog)MEDIUM 6.10.3 %
CVE-2025-25243SRM_MDM_CAT 7.52Path traversal vulnerability in SAP Supplier Relationship Management (Master Data Management Catalog)HIGH 8.60.7 %