PT-2026-32550 · Sap Se · Sap Supplier Relationship Management

Published 2026-04-14 · Updated 2026-04-14 · CVE-2026-0512

NVD

CVSS v3.1

6.1

Medium

AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Due to a Cross-Site Scripting (XSS) vulnerability in the SAP Supplier Relationship Management (SICF Handler in SRM Catalog), an unauthenticated attacker could craft a malicious URL, that if accessed by a victim, results in execution of malicious content within the victim's browser. This could allow the attacker to access and modify information, impacting the confidentiality and integrity of the application, while availability remains unaffected.

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2026-0512

Affected Products

Sap Supplier Relationship Management

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2026-0512 · Security Note
• https://url.sap/sapsecuritypatchday · Note
• https://twitter.com/CVEnew/status/2043976171310694773 · Twitter Post
• https://twitter.com/CVEarity/status/2044028834580967526 · Twitter Post
• https://me.sap.com/notes/3645228 · Note