Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2023-29189


SAP CRM (WebClient UI) - versions S4FND 102, 103, 104, 105, 106, 107, WEBCUIF, 700, 701, 731, 730, 746, 747, 748, 800, 801, allows an authenticated attacker to modify HTTP verbs used in requests to the web server. This application is exposed over the network and successful exploitation can lead to exposure of form fields


Published

2023-04-11T04:16:09.283

Last Modified

2024-11-21T07:56:41.110

Status

Modified

Source

[email protected]

Severity

CVSSv3.1: 5.4 (MEDIUM)

Weaknesses
  • Type: Secondary
    CWE-23
  • Type: Primary
    NVD-CWE-noinfo

Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Application sap customer_relationship_management_s4fnd 102 Yes
Application sap customer_relationship_management_s4fnd 103 Yes
Application sap customer_relationship_management_s4fnd 104 Yes
Application sap customer_relationship_management_s4fnd 105 Yes
Application sap customer_relationship_management_webclient_ui 700 Yes
Application sap customer_relationship_management_webclient_ui 701 Yes
Application sap customer_relationship_management_webclient_ui 730 Yes
Application sap customer_relationship_management_webclient_ui 731 Yes
Application sap customer_relationship_management_webclient_ui 746 Yes
Application sap customer_relationship_management_webclient_ui 747 Yes
Application sap customer_relationship_management_webclient_ui 748 Yes
Application sap customer_relationship_management_webclient_ui 800 Yes
Application sap customer_relationship_management_webclient_ui 801 Yes

References