Cross-Site Scripting Vulnerability in SAP Supplier Relationship Management

CVE-2025-42920

What is CVE-2025-42920?

A Cross-Site Scripting (XSS) vulnerability has been identified in SAP Supplier Relationship Management, enabling unauthenticated attackers to create malicious links that, when accessed by an authenticated user, inject harmful scripts into the web application. This exploitation allows attackers to manipulate content within the victim's browser session, leading to unauthorized data access and compromise of sensitive information. While the availability of the service remains intact, the integrity and confidentiality of user data are at risk, necessitating immediate attention and patching to protect against such threats.

References