Advisories · Technology

SAP_SE SAP Supplier Relationship Management (Live Auction Cockpit).

Every CVE that names SAP_SE SAP Supplier Relationship Management (Live Auction Cockpit) among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2025-30018 CVE record

CVSS 8.6 High

Multiple vulnerabilities in SAP Supplier Relationship Management (Live Auction Cockpit)
- SAP_SE SAP Supplier Relationship Management (Live Auction Cockpit)
- XML external entities (XXE)
Not analysed yet 13 May 2025
CVE-2025-30012 CVE record

CVSS 10.0 CriticalCritical · CVSS 9+

Multiple vulnerabilities in SAP Supplier Relationship Management (Live Auction Cockpit)
- SAP_SE SAP Supplier Relationship Management (Live Auction Cockpit)
- Insecure deserialization
Not analysed yet 13 May 2025
CVE-2025-30011 CVE record

CVSS 5.3 Medium

Multiple vulnerabilities in SAP Supplier Relationship Management (Live Auction Cockpit)
- SAP_SE SAP Supplier Relationship Management (Live Auction Cockpit)
- Information disclosure
Not analysed yet 13 May 2025
CVE-2025-30010 CVE record

CVSS 6.1 Medium

Multiple vulnerabilities in SAP Supplier Relationship Management (Live Auction Cockpit)
- SAP_SE SAP Supplier Relationship Management (Live Auction Cockpit)
- Open redirect
Not analysed yet 13 May 2025
CVE-2025-30009 CVE record

CVSS 6.1 Medium

Multiple vulnerabilities in SAP Supplier Relationship Management (Live Auction Cockpit)
- SAP_SE SAP Supplier Relationship Management (Live Auction Cockpit)
- Cross-site scripting (XSS)
Not analysed yet 13 May 2025