CVE-2026-0513

{"id": "CVE-2026-0513", "cveTags": [], "metrics": {"ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-0513", "role": "CISA Coordinator", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "partial"}], "version": "2.0.3", "timestamp": "2026-01-13T14:39:47.890011Z"}}], "cvssMetricV31": [{"type": "Secondary", "source": "cna@sap.com", "cvssData": {"scope": "CHANGED", "version": "3.1", "baseScore": 4.7, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:L/A:N", "integrityImpact": "LOW", "userInteraction": "REQUIRED", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "NONE", "confidentialityImpact": "NONE"}, "impactScore": 1.4, "exploitabilityScore": 2.8}, {"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "CHANGED", "version": "3.1", "baseScore": 4.7, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:L/A:N", "integrityImpact": "LOW", "userInteraction": "REQUIRED", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "NONE", "confidentialityImpact": "NONE"}, "impactScore": 1.4, "exploitabilityScore": 2.8}]}, "affected": [{"source": "cna@sap.com", "affectedData": [{"vendor": "SAP_SE", "product": "SAP Supplier Relationship Management (SICF Handler in SRM Catalog)", "versions": [{"status": "affected", "version": "SRM_SERVER 700"}, {"status": "affected", "version": "701"}, {"status": "affected", "version": "702"}, {"status": "affected", "version": "713"}, {"status": "affected", "version": "714"}], "defaultStatus": "unaffected"}]}], "published": "2026-01-13T02:15:53.957", "references": [{"url": "https://me.sap.com/notes/3638716", "tags": ["Permissions Required"], "source": "cna@sap.com"}, {"url": "https://url.sap/sapsecuritypatchday", "tags": ["Patch", "Vendor Advisory"], "source": "cna@sap.com"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Secondary", "source": "cna@sap.com", "description": [{"lang": "en", "value": "CWE-601"}]}], "descriptions": [{"lang": "en", "value": "Due to an Open Redirect Vulnerability in SAP Supplier Relationship Management (SICF Handler in SRM Catalog), an unauthenticated attacker could craft a malicious URL that, if accessed by a victim, redirects them to an attacker-controlled site.This causes low impact on integrity of the application. Confidentiality and availability are not impacted."}, {"lang": "es", "value": "Debido a una Vulnerabilidad de Redirecci\u00f3n Abierta en SAP Supplier Relationship Management (controlador SICF en el cat\u00e1logo SRM), un atacante no autenticado podr\u00eda elaborar una URL maliciosa que, si es accedida por una v\u00edctima, la redirige a un sitio controlado por el atacante. Esto causa bajo impacto en la integridad de la aplicaci\u00f3n. La confidencialidad y la disponibilidad no tienen impacto."}], "lastModified": "2026-06-17T10:10:52.550", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:sap:supplier_relationship_management:700:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "069741F5-9DC2-442A-B48B-B0C68A3A6950"}, {"criteria": "cpe:2.3:a:sap:supplier_relationship_management:701:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "0C2110DB-3940-47AF-B878-EB8C6B4E8522"}, {"criteria": "cpe:2.3:a:sap:supplier_relationship_management:702:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "292B51A4-91A2-49C7-A31D-C70DEB620FEB"}, {"criteria": "cpe:2.3:a:sap:supplier_relationship_management:713:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "D9A86731-3213-4ACD-968E-0EA7BEA1192D"}, {"criteria": "cpe:2.3:a:sap:supplier_relationship_management:714:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "EEE98FDD-55FA-4F88-AD58-7FE927129F97"}], "operator": "OR"}]}], "sourceIdentifier": "cna@sap.com"}