Skip to content
CVE PROGRAM SOURCE RECORD6.1 Medium

CVE-2025-43006

Cross-Site Scripting (XSS) vulnerability in SAP Supplier Relationship Management (Master Data Management Catalog)

Description

SAP Supplier Relationship Management (Master Data Management Catalogue) allows an unauthenticated attacker to execute malicious scripts in the application, potentially leading to a Cross-Site Scripting (XSS) vulnerability. This has no impact on the availability of the application, but it can have some minor impact on its confidentiality and integrity.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

SAP_SE SAP Supplier Relationship Management (Master Data Management Catalog)

Default version status: unaffected

  • SRM_MDM_CAT 7.52affected

References