Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2025-30010

The Live Auction Cockpit in SAP Supplier Relationship Management (SRM) uses a deprecated java applet component within the affected SRM packages which allows an unauthenticated attacker to craft a malicious link, which when clicked by a victim, redirects the browser to a malicious site. On successful exploitation, the attacker could cause low impact on confidentiality and integrity with no impact on the availability of the application.

Published

2025-05-13T01:15:47.557

Last Modified

2025-10-23T16:57:58.967

Status

Analyzed

Source

[email protected]

Severity

CVSSv3.1: 6.1 (MEDIUM)

Weaknesses
  • Type: Secondary
    CWE-601
Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Application sap supplier_relationship_management 7.14 Yes
References