CVE-2025-43006: Cross-Site Scripting (XSS) vulnerability in SAP Supplier Relationship Management (Master Data Management Catalog)
SAP Supplier Relationship Management (Master Data Management Catalogue) allows an unauthenticated attacker to execute malicious scripts in the application, potentially leading to a Cross-Site Scripting (XSS) vulnerability. This has no impact on the availability of the application, but it can have some minor impact on its confidentiality and integrity.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-43006?
CVE-2025-43006 is classified as a medium severity vulnerability due to the potential for Cross-Site Scripting (XSS) attacks.
How do I fix CVE-2025-43006?
To fix CVE-2025-43006, apply the latest security patches released by SAP for the Supplier Relationship Management software.
Who is affected by CVE-2025-43006?
CVE-2025-43006 affects users of the SAP Supplier Relationship Management application, particularly those utilizing the Master Data Management Catalogue.
What type of vulnerability is CVE-2025-43006?
CVE-2025-43006 is a Cross-Site Scripting (XSS) vulnerability that allows unauthenticated attackers to execute malicious scripts within the application.
Can CVE-2025-43006 impact application availability?
CVE-2025-43006 does not impact the availability of the SAP Supplier Relationship Management application.