PT-2026-2344 · Sap · Sap Supplier Relationship Management+1

Published 2026-01-12 · Updated 2026-01-13 · CVE-2026-0513

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions SAP Supplier Relationship Management (affected versions not specified)

Description An unauthenticated attacker could exploit an Open Redirect in the SICF Handler within the SRM Catalog component of SAP Supplier Relationship Management. This allows the attacker to create a malicious URL that redirects a victim to a site controlled by the attacker. The issue results in a low impact on application integrity, with no impact to confidentiality or availability.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Open Redirect

Weakness Enumeration

CWE-601

Related Identifiers

BDU:2026-00767

CVE-2026-0513

Affected Products

Sap Supplier Relationship Management

Srm Catalog

References · 8

• https://osv.dev/vulnerability/CVE-2026-0513 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-0513 · Security Note
• https://bdu.fstec.ru/vul/2026-00767 · Security Note
• https://url.sap/sapsecuritypatchday · Vendor Advisory
• https://me.sap.com/notes/3638716 · Note
• https://support.sap.com/en/my-support/knowledge-base/security-notes-news/january-2026.html · Note
• https://twitter.com/VulmonFeeds/status/2010965555876925523 · Twitter Post
• https://twitter.com/CVEnew/status/2010911095238599109 · Twitter Post