CVE-2026-0513

Tuesday, January 13, 2026

4.7

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:L/A:N

Summary

Due to an Open Redirect Vulnerability in SAP Supplier Relationship Management (SICF Handler in SRM Catalog), an unauthenticated attacker could craft a malicious URL that, if accessed by a victim, redirects them to an attacker-controlled site.This causes low impact on integrity of the application. Confidentiality and availability are not impacted.

Affected Software

Vendor	Product	Version Range	Status
SAP_SE	SAP Supplier Relationship Management (SICF Handler in SRM Catalog)	`SRM_SERVER 700`	affected
SAP_SE	SAP Supplier Relationship Management (SICF Handler in SRM Catalog)	`701`	affected
SAP_SE	SAP Supplier Relationship Management (SICF Handler in SRM Catalog)	`702`	affected
SAP_SE	SAP Supplier Relationship Management (SICF Handler in SRM Catalog)	`713`	affected
SAP_SE	SAP Supplier Relationship Management (SICF Handler in SRM Catalog)	`714`	affected

Weaknesses

CWE-601: CWE-601: URL Redirection to Untrusted Site

ADP Enrichment

CISA ADP Vulnrichment

SSVC:
Exploitation: none
- Automatable: no
- Technical Impact: partial

References

Feedback

Was this page helpful?

Glad to hear it! Please tell us how we can improve.

Sorry to hear that. Please tell us how we can improve.