SAP Customer Relationship Management WebClient UI 700
Approved changes feed: RSS · Atom
cpe:2.3:a:sap:customer_relationship_management_webclient_ui:700:*:*:*:*:*:*:*
part: a version: 700 update: *
| Vendor | Sap (dd5aa0c0-20b0-5c86-a937-aa29f1a33b77) |
|---|---|
| Product | Customer Relationship Management Webclient Ui (8fd9e2c9-bf31-5df3-aa20-6a94e13b69f4) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2023-30742 |
vulnerable | 2026-06-08 06:04:40.894202 |
Cross-Site Scripting (XSS) vulnerability in SAP CRM (WebClient UI)
MEDIUM (6.1)
SAP CRM (WebClient UI) - versions S4FND 102, S4FND 103, S4FND 104, S4FND 105, S4FND 106, S4FND 107, WEBCUIF 700, WEBCUIF 701, WEBCUIF 731, WEBCUIF 746, WEBCUIF 747, WEBCUIF 748, WEBCUIF 800, WEBCUIF 801, does not sufficiently encode user-controlled inputs, resulting in a stored Cross-Site Scripting (XSS) vulnerability.An attacker could store a malicious URL and lure the victim to click, causing the script supplied by the attacker to execute in the victim user's session. The information from the victim's session could then be modified or read by the attacker.
Published: 2023-05-09T01:35:17.726Z
Updated: 2025-01-28T19:21:15.471Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-29189 |
vulnerable | 2026-06-08 06:02:39.076080 |
HTTP Verb Tampering vulnerability in SAP CRM (WebClient UI)
MEDIUM (5.4)
SAP CRM (WebClient UI) - versions S4FND 102, 103, 104, 105, 106, 107, WEBCUIF, 700, 701, 731, 730, 746, 747, 748, 800, 801, allows an authenticated attacker to modify HTTP verbs used in requests to the web server. This application is exposed over the network and successful exploitation can lead to exposure of form fields
Published: 2023-04-11T03:11:30.554Z
Updated: 2025-02-07T19:31:46.088Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.