VYPR
← All advisories
Medium severity6.1NVD Advisory· Published Sep 10, 2019· Updated Jun 17, 2026

CVE-2019-0361

CVE-2019-0361

Description

SAP Supplier Relationship Management (Master Data Management Catalog - SRM_MDM_CAT, before versions 3.73, 7.31, 7.32) does not sufficiently encode user-controlled inputs, resulting in Cross-Site Scripting (XSS) vulnerability.

Affected products

5
  • SAP/Supplier Relationship Management4 versions
    cpe:2.3:a:sap:supplier_relationship_management:3.73:*:*:*:*:*:*:*+ 3 more
    • cpe:2.3:a:sap:supplier_relationship_management:3.73:*:*:*:*:*:*:*
    • cpe:2.3:a:sap:supplier_relationship_management:7.31:*:*:*:*:*:*:*
    • cpe:2.3:a:sap:supplier_relationship_management:7.32:*:*:*:*:*:*:*
    • (no CPE)range: <3.73, <7.31, <7.32
  • SAP SE/SAP Supplier Relationship Management (Master Data Management Catalog) (SRM_MDM_CAT)v5
    Range: < 3.73

Patches

Vulnerability mechanics

References

2

News mentions

0

No linked articles in our index yet.