CVE-2026-0513

Description

Due to an Open Redirect Vulnerability in SAP Supplier Relationship Management (SICF Handler in SRM Catalog), an unauthenticated attacker could craft a malicious URL that, if accessed by a victim, redirects them to an attacker-controlled site.This causes low impact on integrity of the application. Confidentiality and availability are not impacted.

PUBLISHED Reserved 2025-12-09 | Published 2026-01-13 | Updated 2026-01-13 | Assigner sap

Problem types

CWE-601: URL Redirection to Untrusted Site

Product status

References

me.sap.com/notes/3638716

url.sap/sapsecuritypatchday

cve.org (CVE-2026-0513)

nvd.nist.gov (CVE-2026-0513)

Download JSON