Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2023-24525

SAP CRM WebClient UI - versions WEBCUIF 748, 800, 801, S4FND 102, 103, does not sufficiently encode user-controlled inputs, resulting in Cross-Site Scripting (XSS) vulnerability. On successful exploitation an authenticated attacker can cause limited impact on confidentiality of the application.

Published

2023-02-14T04:15:12.770

Last Modified

2024-11-21T07:48:03.267

Status

Modified

Source

[email protected]

Severity

CVSSv3.1: 4.3 (MEDIUM)

Weaknesses
  • Type: Primary
    CWE-79
Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Application sap customer_relationship_management_webclient_ui 7.00 Yes
Application sap customer_relationship_management_webclient_ui 7.01 Yes
Application sap customer_relationship_management_webclient_ui 7.02 Yes
Application sap customer_relationship_management_webclient_ui 7.31 Yes
Application sap customer_relationship_management_webclient_ui 7.40 Yes
Application sap customer_relationship_management_webclient_ui 7.48 Yes
Application sap customer_relationship_management_webclient_ui 7.50 Yes
Application sap customer_relationship_management_webclient_ui 7.52 Yes
Application sap customer_relationship_management_webclient_ui 8.00 Yes
Application sap customer_relationship_management_webclient_ui 8.01 Yes
Application sap s4fnd 1.02 Yes
Application sap s4fnd 1.03 Yes
References