CR
Product
Customer Relationship Management Webclient UI
12
CVEs
0
On KEV
7.7
Max CVSS
0
New 30D
Severity mix
Critical 0High 1Medium 11Low 0
Watch
Add Customer Relationship Management Webclient UI to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2024-37175 | 6.5 | Jul 9 | SAP CRM WebClient does not perform necessary authorization check for an authenticated user, resulting in escalation of privileges Affected: 701; 731; 746; 747; 748; 800; +1 more |
| CVE-2024-37174 | 6.1 | Jul 9 | Custom CSS support option in SAP CRM WebClient UI does not sufficiently encode user-controlled inputs resulting in Cross-Site Scripting vulnerability Affected: 701; 731; 746; 747; 748; 800; +1 more |
| CVE-2024-37173 | 6.1 | Jul 9 | Due to insufficient input validation, SAP CRM WebClient UI allows an unauthenticated attacker to craft a URL link which embeds a malicious script Affected: 701; 731; 746; 747; 748; 800; +1 more |
| CVE-2024-34686 | 6.1 | Jun 11 | Due to insufficient input validation, SAP CRM WebClient UI allows an unauthenticated attacker to craft a URL link which embeds a malicious script Affected: 103; 104; 105; 106; 107; 701; +9 more |
| CVE-2023-30742 | 6.1 | May 9 | SAP CRM (WebClient UI) - versions S4FND 102, S4FND 103, S4FND 104, S4FND 105, S4FND 106, S4FND 107, WEBCUIF 700, WEBCUIF 701, WEBCUIF 731, WEBCUIF 746, WEBCUIF 747, WEBCUIF 748,… Affected: 700; 701; 731; 746; 747; 748; +2 more |
| CVE-2018-2364 | 6.1 | Feb 14 | SAP CRM WebClient UI 7.01, 7.31, 7.46, 7.47, 7.48, 8.00, 8.01, S4FND 1.02, does not sufficiently validate and/or encode hidden fields, resulting in Cross-Site Scripting (XSS)… Affected: 7.01; 7.31; 7.46; 7.47; 7.48; 8.00; +1 more |
| CVE-2023-29188 | 5.4 | May 9 | SAP CRM WebClient UI - versions SAPSCORE 129, S4FND 102, S4FND 103, S4FND 104, S4FND 105, S4FND 106, S4FND 107, WEBCUIF 701, WEBCUIF 731, WEBCUIF 746, WEBCUIF 747, WEBCUIF 748,… Affected: 7.01; 7.31; 7.46; 7.47; 7.48; 8.00; +1 more |
| CVE-2023-29189 | 5.4 | Apr 11 | SAP CRM (WebClient UI) - versions S4FND 102, 103, 104, 105, 106, 107, WEBCUIF, 700, 701, 731, 730, 746, 747, 748, 800, 801, allows an authenticated attacker to modify HTTP verbs… Affected: 700; 701; 730; 731; 746; 747; +3 more |
| CVE-2023-24525 | 5.4 | Feb 14 | SAP CRM WebClient UI - versions WEBCUIF 748, 800, 801, S4FND 102, 103, does not sufficiently encode user-controlled inputs, resulting in Cross-Site Scripting (XSS)… Affected: 7.00; 7.01; 7.02; 7.31; 7.40; 7.48; +4 more |
| CVE-2019-0245 | 5.4 | Jan 8 | SAP CRM WebClient UI (fixed in SAPSCORE 1.12; S4FND 1.02; WEBCUIF 7.31, 7.46, 7.47, 7.48, 8.0, 8.01) does not sufficiently encode user-controlled inputs, resulting in Cross-Site… Affected: 7.31; 7.46; 7.47; 7.48; 8.00; 8.01 |
| CVE-2019-0244 | 5.4 | Jan 8 | SAP CRM WebClient UI (fixed in SAPSCORE 1.12; S4FND 1.02; WEBCUIF 7.31, 7.46, 7.47, 7.48, 8.0, 8.01) does not sufficiently encode user-controlled inputs, resulting in Cross-Site… Affected: 7.31; 7.46; 7.47; 7.48; 8.00; 8.01 |
Showing 11