CVE-2023-39436: SAP Supplier Relationship Management

Medium severity, CVSS 5.8. EPSS: 0.4% chance of exploitation in the next 30 days.

SAP Supplier Relationship Management -versions 600, 602, 603, 604, 605, 606, 616, 617, allows an unauthorized attacker to discover information relating to SRM within Vendor Master Data for Business Partners replication functionality.This information could be used to allow the attacker to specialize their attacks against SRM.

Affected products

• SAP Supplier Relationship Management: version 600 only; version 602 only; version 603 only; version 604 only; version 605 only; version 606 only; …

Published 2023-08-08. Last modified 2026-06-17.