Medium severity5.8NVD Advisory· Published Aug 8, 2023· Updated Jun 17, 2026
CVE-2023-39436
CVE-2023-39436
Description
SAP Supplier Relationship Management -versions 600, 602, 603, 604, 605, 606, 616, 617, allows an unauthorized attacker to discover information relating to SRM within Vendor Master Data for Business Partners replication functionality.This information could be used to allow the attacker to specialize their attacks against SRM.
Affected products
10cpe:2.3:a:sap:supplier_relationship_management:600:*:*:*:*:*:*:*+ 9 more
- cpe:2.3:a:sap:supplier_relationship_management:600:*:*:*:*:*:*:*
- cpe:2.3:a:sap:supplier_relationship_management:602:*:*:*:*:*:*:*
- cpe:2.3:a:sap:supplier_relationship_management:603:*:*:*:*:*:*:*
- cpe:2.3:a:sap:supplier_relationship_management:604:*:*:*:*:*:*:*
- cpe:2.3:a:sap:supplier_relationship_management:605:*:*:*:*:*:*:*
- cpe:2.3:a:sap:supplier_relationship_management:606:*:*:*:*:*:*:*
- cpe:2.3:a:sap:supplier_relationship_management:616:*:*:*:*:*:*:*
- cpe:2.3:a:sap:supplier_relationship_management:617:*:*:*:*:*:*:*
- (no CPE)range: 600, 602, 603, 604, 605, 606, 616, 617
- (no CPE)range: 600
Patches
Vulnerability mechanics
References
2- www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.htmlnvdVendor Advisory
- me.sap.com/notes/2067220nvdPermissions Required
News mentions
0No linked articles in our index yet.