SAP SAPSCORE 1.12
Approved changes feed: RSS · Atom
cpe:2.3:a:sap:sapscore:1.12:*:*:*:*:*:*:*
part: a version: 1.12 update: *
| Vendor | Sap (dd5aa0c0-20b0-5c86-a937-aa29f1a33b77) |
|---|---|
| Product | Sapscore (187159e1-4fec-5619-a014-5a09d1e972b7) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2019-0245 |
vulnerable | 2026-06-08 05:12:19.501773 |
Details available
SAP CRM WebClient UI (fixed in SAPSCORE 1.12; S4FND 1.02; WEBCUIF 7.31, 7.46, 7.47, 7.48, 8.0, 8.01) does not sufficiently encode user-controlled inputs, resulting in Cross-Site Scripting (XSS) vulnerability.
Published: 2019-01-08T20:00:00.000Z
Updated: 2024-08-04T17:44:15.952Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-0244 |
vulnerable | 2026-06-08 05:12:19.501015 |
Details available
SAP CRM WebClient UI (fixed in SAPSCORE 1.12; S4FND 1.02; WEBCUIF 7.31, 7.46, 7.47, 7.48, 8.0, 8.01) does not sufficiently encode user-controlled inputs, resulting in Cross-Site Scripting (XSS) vulnerability.
Published: 2019-01-08T20:00:00.000Z
Updated: 2024-08-04T17:44:16.026Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-2419 |
vulnerable | 2026-06-08 05:11:37.083666 |
Details available
LOW (3.7)
SAP Enterprise Financial Services (SAPSCORE 1.11, 1.12; S4CORE 1.01, 1.02; EA-FINSERV 6.04, 6.05, 6.06, 6.16, 6.17, 6.18, 8.0) does not perform necessary authorization checks for an authenticated user, resulting in escalation of privileges.
Published: 2018-05-09T20:00:00.000Z
Updated: 2024-08-05T04:21:33.627Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.