Security Flaw in SAP Supplier Relationship Management Utilizing Deprecated Java Applet

CVE-2025-30011

What is CVE-2025-30011?

The Live Auction Cockpit within SAP Supplier Relationship Management (SRM) is compromised by the use of a deprecated Java applet component. This security flaw enables unauthenticated attackers to send malicious requests, potentially exposing sensitive internal version details of the SRM system. Although the impact on confidentiality is considered low, organizations should be aware that this vulnerability does not affect the overall integrity or availability of the application. It is critical for users of SAP SRM to assess their systems and apply necessary security patches to mitigate this risk.

References