Lucene search
SapCVELIST:CVE-2019-0368HistoryOct 08, 2019 - 7:17 p.m.
CVE-2019-0368
2019-10-0819:17:44
sap
www.cve.org
2
EPSS
0.001
Percentile
22.7%
SAP Customer Relationship Management (Email Management), versions: S4CRM before 1.0 and 2.0, BBPCRM before 7.0, 7.01, 7.02, 7.12, 7.13 and 7.14, does not sufficiently encode user-controlled inputs within the mail client resulting in Cross-Site Scripting vulnerability.
CNA Affected
[
{
"product": "SAP Customer Relationship Management (Email Management - S4CRM)",
"vendor": "SAP SE",
"versions": [
{
"status": "affected",
"version": "< 1.0"
},
{
"status": "affected",
"version": "< 2.0"
}
]
},
{
"product": "SAP Customer Relationship Management (Email Management - BBPCRM)",
"vendor": "SAP SE",
"versions": [
{
"status": "affected",
"version": "< 7.0"
},
{
"status": "affected",
"version": "< 7.01"
},
{
"status": "affected",
"version": "< 7.02"
},
{
"status": "affected",
"version": "< 7.12"
},
{
"status": "affected",
"version": "< 7.13"
},
{
"status": "affected",
"version": "< 7.14"
}
]
}
]Related
prion
prion
Cross site scripting
2019-10-08 20:15:00
nvd
nvd
CVE-2019-0368
2019-10-08 20:15:10
symantec
symantec
cve
cve
CVE-2019-0368
2019-10-08 20:15:10