SAP

Supplier Relationship Management

12 vulnerabilities found.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
4.3

CVE-2014-4161

  • EPSS 0.29%
  • Published 13.06.2014 14:55:18
  • Last modified 12.04.2025 10:46:40

Cross-site scripting (XSS) vulnerability in la/umTestSSO.jsp in SAP Supplier Relationship Management (SRM) allows remote attackers to inject arbitrary web script or HTML via the url parameter.

5.8

CVE-2014-4159

Exploit
  • EPSS 0.29%
  • Published 13.06.2014 14:55:17
  • Last modified 12.04.2025 10:46:40

Open redirect vulnerability in in la/umTestSSO.jsp in SAP Supplier Relationship Management (SRM) allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the url parameter.