CVE-2026-0513: SAP Supplier Relationship Management

Medium severity, CVSS 4.7. EPSS: 0.2% chance of exploitation in the next 30 days.

Due to an Open Redirect Vulnerability in SAP Supplier Relationship Management (SICF Handler in SRM Catalog), an unauthenticated attacker could craft a malicious URL that, if accessed by a victim, redirects them to an attacker-controlled site.This causes low impact on integrity of the application. Confidentiality and availability are not impacted.

Affected products

• SAP Supplier Relationship Management: version 700 only; version 701 only; version 702 only; version 713 only; version 714 only

Published 2026-01-13. Last modified 2026-06-17.