CR
Product
Customer Relationship Management S4fnd
6
CVEs
0
On KEV
7.7
Max CVSS
0
New 30D
Severity mix
Critical 0High 1Medium 5Low 0
Watch
Add Customer Relationship Management S4fnd to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2024-37175 | 6.5 | Jul 9 | SAP CRM WebClient does not perform necessary authorization check for an authenticated user, resulting in escalation of privileges Affected: 102; 103; 104; 105; 106; 107; +1 more |
| CVE-2024-37174 | 6.1 | Jul 9 | Custom CSS support option in SAP CRM WebClient UI does not sufficiently encode user-controlled inputs resulting in Cross-Site Scripting vulnerability Affected: 102; 103; 104; 105; 106; 107; +1 more |
| CVE-2024-37173 | 6.1 | Jul 9 | Due to insufficient input validation, SAP CRM WebClient UI allows an unauthenticated attacker to craft a URL link which embeds a malicious script Affected: 102; 103; 104; 105; 106; 107; +1 more |
| CVE-2023-30742 | 6.1 | May 9 | SAP CRM (WebClient UI) - versions S4FND 102, S4FND 103, S4FND 104, S4FND 105, S4FND 106, S4FND 107, WEBCUIF 700, WEBCUIF 701, WEBCUIF 731, WEBCUIF 746, WEBCUIF 747, WEBCUIF 748,… Affected: 102; 103; 104; 105; 106; 107 |
| CVE-2023-29189 | 5.4 | Apr 11 | SAP CRM (WebClient UI) - versions S4FND 102, 103, 104, 105, 106, 107, WEBCUIF, 700, 701, 731, 730, 746, 747, 748, 800, 801, allows an authenticated attacker to modify HTTP verbs… Affected: 102; 103; 104; 105 |
Showing 5