PT-2026-2344 · Sap · Sap Supplier Relationship Management+1

CVE-2026-0513 · Publicado 2026-01-12 · Atualizado 2026-01-13

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions SAP Supplier Relationship Management (affected versions not specified)

Description An unauthenticated attacker could exploit an Open Redirect in the SICF Handler within the SRM Catalog component of SAP Supplier Relationship Management. This allows the attacker to create a malicious URL that redirects a victim to a site controlled by the attacker. The issue results in a low impact on application integrity, with no impact to confidentiality or availability.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Open Redirect

Enumeração de Fraquezas

CWE-601

Identificadores relacionados

BDU:2026-00767

CVE-2026-0513

Produtos afetados

Sap Supplier Relationship Management

Srm Catalog

Referências · 8

• https://osv.dev/vulnerability/CVE-2026-0513 · Aviso do Fabricante
• https://me.sap.com/notes/3638716 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2026-0513 · Nota de Segurança
• https://bdu.fstec.ru/vul/2026-00767 · Nota de Segurança
• https://support.sap.com/en/my-support/knowledge-base/security-notes-news/january-2026.html · Nota
• https://twitter.com/VulmonFeeds/status/2010965555876925523 · Publicação no Twitter
• https://twitter.com/CVEnew/status/2010911095238599109 · Publicação no Twitter
• https://url.sap/sapsecuritypatchday · Aviso do Fabricante