VYPR
← All advisories
Medium severity5.8NVD Advisory· Published Aug 8, 2023· Updated Jun 17, 2026

CVE-2023-39436

CVE-2023-39436

Description

SAP Supplier Relationship Management -versions 600, 602, 603, 604, 605, 606, 616, 617, allows an unauthorized attacker to discover information relating to SRM within Vendor Master Data for Business Partners replication functionality.This information could be used to allow the attacker to specialize their attacks against SRM.

Affected products

10
  • SAP/Supplier Relationship Managementllm-fuzzy10 versions
    600, 602, 603, 604, 605, 606, 616, 617+ 9 more
    • (no CPE)range: 600, 602, 603, 604, 605, 606, 616, 617
    • (no CPE)range: 600
    • cpe:2.3:a:sap:supplier_relationship_management:600:*:*:*:*:*:*:*
    • cpe:2.3:a:sap:supplier_relationship_management:602:*:*:*:*:*:*:*
    • cpe:2.3:a:sap:supplier_relationship_management:603:*:*:*:*:*:*:*
    • cpe:2.3:a:sap:supplier_relationship_management:604:*:*:*:*:*:*:*
    • cpe:2.3:a:sap:supplier_relationship_management:605:*:*:*:*:*:*:*
    • cpe:2.3:a:sap:supplier_relationship_management:606:*:*:*:*:*:*:*
    • cpe:2.3:a:sap:supplier_relationship_management:616:*:*:*:*:*:*:*
    • cpe:2.3:a:sap:supplier_relationship_management:617:*:*:*:*:*:*:*

Patches

Vulnerability mechanics

References

2

News mentions

0

No linked articles in our index yet.