SAP Customer Relationship Management WebClient UI 730

Submit a proposal Propose CVE/GCVE/GHSA reference

Approved changes feed: RSS · Atom

cpe:2.3:a:sap:customer_relationship_management_webclient_ui:730:*:*:*:*:*:*:*

part: a version: 730 update: *

VendorSap (dd5aa0c0-20b0-5c86-a937-aa29f1a33b77)
ProductCustomer Relationship Management Webclient Ui (8fd9e2c9-bf31-5df3-aa20-6a94e13b69f4)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-34686 vulnerable 2026-06-08 06:37:34.810593 Cross-Site Scripting (XSS) vulnerability in SAP CRM (WebClient UI)
MEDIUM (6.1)
Due to insufficient input validation, SAP CRM WebClient UI allows an unauthenticated attacker to craft a URL link which embeds a malicious script. When a victim clicks on this link, the script will be executed in the victim's browser giving the attacker the ability to access and/or modify information with no effect on availability of the application.
Published: 2024-06-11T02:11:49.630Z
Updated: 2024-08-02T02:59:22.207Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-29189 vulnerable 2026-06-08 06:02:39.077287 HTTP Verb Tampering vulnerability in SAP CRM (WebClient UI)
MEDIUM (5.4)
SAP CRM (WebClient UI) - versions S4FND 102, 103, 104, 105, 106, 107, WEBCUIF, 700, 701, 731, 730, 746, 747, 748, 800, 801, allows an authenticated attacker to modify HTTP verbs used in requests to the web server. This application is exposed over the network and successful exploitation can lead to exposure of form fields
Published: 2023-04-11T03:11:30.554Z
Updated: 2025-02-07T19:31:46.088Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.