SAP Customer Relationship Management WebClient UI 701
Approved changes feed: RSS · Atom
cpe:2.3:a:sap:customer_relationship_management_webclient_ui:701:*:*:*:*:*:*:*
part: a version: 701 update: *
| Vendor | Sap (dd5aa0c0-20b0-5c86-a937-aa29f1a33b77) |
|---|---|
| Product | Customer Relationship Management Webclient Ui (8fd9e2c9-bf31-5df3-aa20-6a94e13b69f4) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2024-39598 |
vulnerable | 2026-06-08 06:41:51.183093 |
[Multiple CVEs] Multiple vulnerabilities in SAP CRM (WebClient UI)
MEDIUM (5)
SAP CRM (WebClient UI Framework) allows an
authenticated attacker to enumerate accessible HTTP endpoints in the internal
network by specially crafting HTTP requests. On successful exploitation this
can result in information disclosure. It has no impact on integrity and
availability of the application.
Published: 2024-07-09T04:04:41.283Z
Updated: 2024-08-02T04:26:15.953Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-37175 |
vulnerable | 2026-06-08 06:39:46.783622 |
[Multiple CVEs] Multiple vulnerabilities in SAP CRM (WebClient UI)
MEDIUM (4.3)
SAP CRM WebClient does not
perform necessary authorization check for an authenticated user, resulting in
escalation of privileges. This could allow an attacker to access some sensitive
information.
Published: 2024-07-09T04:07:21.612Z
Updated: 2024-08-02T03:50:55.138Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-37174 |
vulnerable | 2026-06-08 06:39:46.775995 |
[Multiple CVEs] Multiple vulnerabilities in SAP CRM (WebClient UI)
MEDIUM (6.1)
Custom CSS support option in SAP CRM WebClient
UI does not sufficiently encode user-controlled inputs resulting in Cross-Site
Scripting vulnerability. On successful exploitation an attacker can cause
limited impact on confidentiality and integrity of the application.
Published: 2024-07-09T04:01:21.084Z
Updated: 2024-08-02T03:50:55.134Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-37173 |
vulnerable | 2026-06-08 06:39:46.770168 |
[Multiple CVEs] Multiple vulnerabilities in SAP CRM (WebClient UI)
MEDIUM (6.1)
Due to insufficient input validation, SAP
CRM WebClient UI allows an unauthenticated attacker to craft a URL link which
embeds a malicious script. When a victim clicks on this link, the script will
be executed in the victim's browser giving the attacker the ability to access
and/or modify information with no effect on availability of the application.
Published: 2024-07-09T03:57:15.928Z
Updated: 2024-08-02T03:50:54.682Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-34686 |
vulnerable | 2026-06-08 06:37:34.809873 |
Cross-Site Scripting (XSS) vulnerability in SAP CRM (WebClient UI)
MEDIUM (6.1)
Due to insufficient input validation, SAP CRM
WebClient UI allows an unauthenticated attacker to craft a URL link which
embeds a malicious script. When a victim clicks on this link, the script will
be executed in the victim's browser giving the attacker the ability to access
and/or modify information with no effect on availability of the application.
Published: 2024-06-11T02:11:49.630Z
Updated: 2024-08-02T02:59:22.207Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-30742 |
vulnerable | 2026-06-08 06:04:40.894822 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-29189 |
vulnerable | 2026-06-08 06:02:39.076684 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.