CRM (WebClient UI) vulnerabilities | LiveThreat CVE Feed — Verisq

Login Request a demo

CW

Product

CRM (WebClient UI)

by SAP · last CVE Feb 13, 2024

4

CVEs

0

On KEV

5.4

Max CVSS

0

New 30D

Vulnerabilities4 In the news0 Timeline

Severity mix

Critical 0High 0Medium 4Low 0

Severity

All severities4 Critical0 High0 Medium4 Low0

Exploitation

On CISA KEV0 Exploited in the wild0

Watch

Add CRM (WebClient UI) to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2024-22130	5.4	0%	Feb 13	Cross-Site Scripting (XSS) vulnerability in SAP CRM WebClient UI Affected: s4fnd_102; s4fnd_103; s4fnd_104; s4fnd_105; s4fnd_106; s4fnd_107; +10 more
CVE-2023-29189	5.4	0%	Apr 11	HTTP Verb Tampering vulnerability in SAP CRM (WebClient UI) Affected: S4FND 102; S4FND 103; S4FND 104; S4FND 105; S4FND 106; S4FND 107; +9 more
CVE-2023-24525	5.4	0%	Feb 14	SAP CRM WebClient UI - versions WEBCUIF 748, 800, 801, S4FND 102, 103, does not sufficiently encode user-controlled inputs, resulting in Cross-Site Scripting (XSS)… Affected: WEBCUIF 748; 800; 801; S4FND 102; 103
CVE-2024-24742	4.1	0%	Feb 13	Cross-Site Scripting (XSS) vulnerability in SAP CRM (WebClient UI) Affected: s4fnd_102; s4fnd_103; s4fnd_104; s4fnd_105; s4fnd_106; webcuif_701; +6 more