S4fnd vulnerabilities | LiveThreat CVE Feed — Verisq

Login Request a demo

S4

Product

S4fnd

by Sap · last CVE May 9, 2023

5

CVEs

0

On KEV

6.1

Max CVSS

0

New 30D

Vulnerabilities5 In the news0 Timeline

Severity mix

Critical 0High 0Medium 5Low 0

Severity

All severities5 Critical0 High0 Medium5 Low0

Exploitation

On CISA KEV0 Exploited in the wild0

Watch

Add S4fnd to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2018-2364	6.1	1%	Feb 14	SAP CRM WebClient UI 7.01, 7.31, 7.46, 7.47, 7.48, 8.00, 8.01, S4FND 1.02, does not sufficiently validate and/or encode hidden fields, resulting in Cross-Site Scripting (XSS)… Affected: 1.02
CVE-2023-29188	5.4	0%	May 9	SAP CRM WebClient UI - versions SAPSCORE 129, S4FND 102, S4FND 103, S4FND 104, S4FND 105, S4FND 106, S4FND 107, WEBCUIF 701, WEBCUIF 731, WEBCUIF 746, WEBCUIF 747, WEBCUIF 748,… Affected: 1.02; 102; 103; 104; 105; 106; +1 more
CVE-2023-24525	5.4	0%	Feb 14	SAP CRM WebClient UI - versions WEBCUIF 748, 800, 801, S4FND 102, 103, does not sufficiently encode user-controlled inputs, resulting in Cross-Site Scripting (XSS)… Affected: 1.02; 1.03
CVE-2019-0245	5.4	1%	Jan 8	SAP CRM WebClient UI (fixed in SAPSCORE 1.12; S4FND 1.02; WEBCUIF 7.31, 7.46, 7.47, 7.48, 8.0, 8.01) does not sufficiently encode user-controlled inputs, resulting in Cross-Site… Affected: 1.02
CVE-2019-0244	5.4	1%	Jan 8	SAP CRM WebClient UI (fixed in SAPSCORE 1.12; S4FND 1.02; WEBCUIF 7.31, 7.46, 7.47, 7.48, 8.0, 8.01) does not sufficiently encode user-controlled inputs, resulting in Cross-Site… Affected: 1.02