Riskcovery

CVE-2023-39436

Information Disclosure in SAP Supplier Relationship Management

State
Published
Severity
5.8 Medium
Published
Aug 8, 2023
Updated
Oct 15, 2024
Reserved
Aug 1, 2023

Read the record on cve.org

Description

SAP Supplier Relationship Management -versions 600, 602, 603, 604, 605, 606, 616, 617, allows an unauthorized attacker to discover information relating to SRM within Vendor Master Data for Business Partners replication functionality.This information could be used to allow the attacker to specialize their attacks against SRM.

Scores

CVSSScoreVectorSource
3.15.8 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:N/A:Nsap

Weaknesses

  • CWE-306 Missing Authentication for Critical Function

Affected Products

ProductVersions
SAP Supplier Relationship ManagementSAP_SE
  • 600Affected
  • 602Affected
  • 603Affected
  • 604Affected
  • 605Affected
  • 606Affected
  • 616Affected
  • 617Affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.