SAP Supplier Relationship Management (Live Auction Cockpit) vulnerabilities

2 known vulnerabilities in SAP Supplier Relationship Management (Live Auction Cockpit) from SAP. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.5 High severity

  SAP Supplier Relationship Management (Live…: Improper Restriction of XML External Entity Reference

  CVE-2025-30018May 13, 2025SAP

  The Live Auction Cockpit in SAP Supplier Relationship Management (SRM) allows an unauthenticated attacker to submit an application servlet request with a crafted XML file which when parsed, enables the attacker to access sensitive files and data. This vulnerab

• 9.8 Critical severity

  SAP Supplier Relationship Management (Live…: Deserialization of Untrusted Data

  CVE-2025-30012May 13, 2025SAP

  The Live Auction Cockpit in SAP Supplier Relationship Management (SRM) uses a deprecated java applet component, which allows an unauthenticated attacker to send malicious payload request in a specific encoding format. The servlet will then decode this maliciou