Lucene search
K

21 matches found

Prion
Prion
added 2024/02/13 3:15 a.m.9 views

Cross site scripting

SAP CRM WebClient UI - version S4FND 102, S4FND 103, S4FND 104, S4FND 105, S4FND 106, WEBCUIF 701, WEBCUIF 731, WEBCUIF 746, WEBCUIF 747, WEBCUIF 748, WEBCUIF 800, WEBCUIF 801, does not sufficiently encode user-controlled inputs, resulting in Cross-Site Scripting XSS vulnerability. An attacker wi...

3.5CVSS6.2AI score0.00222EPSS
Exploits0References2
Prion
Prion
added 2024/02/13 3:15 a.m.16 views

Cross site scripting

Print preview option in SAP CRM WebClient UI - versions S4FND 102, S4FND 103, S4FND 104, S4FND 105, S4FND 106, S4FND 107, S4FND 108, WEBCUIF 700, WEBCUIF 701, WEBCUIF 730, WEBCUIF 731, WEBCUIF 746, WEBCUIF 747, WEBCUIF 748, WEBCUIF 800, WEBCUIF 801, does not sufficiently encode user-controlled...

4.9CVSS6.5AI score0.0038EPSS
Exploits0References2
Vulnrichment
Vulnrichment
added 2024/02/13 2:42 a.m.23 views

CVE-2024-24742 Cross-Site Scripting (XSS) vulnerability in SAP CRM (WebClient UI)

SAP CRM WebClient UI - version S4FND 102, S4FND 103, S4FND 104, S4FND 105, S4FND 106, WEBCUIF 701, WEBCUIF 731, WEBCUIF 746, WEBCUIF 747, WEBCUIF 748, WEBCUIF 800, WEBCUIF 801, does not sufficiently encode user-controlled inputs, resulting in Cross-Site Scripting XSS vulnerability. An attacker wi...

4.1CVSS6.1AI score0.00222EPSS
Exploits0References2
CVE
CVE
added 2024/02/13 2:42 a.m.43 views

CVE-2024-24742

SAP CRM WebClient UI (versions S4FND 102–106; WEBCUIF 701–801) contains an XSS vulnerability due to insufficient encoding of user-controlled inputs. The issue affects the integrity of application data with low-privilege exploitation and has no impact on confidentiality or availability as describe...

4.1CVSS4.3AI score0.00222EPSS
Exploits0References2Affected Software1
Cvelist
Cvelist
added 2024/02/13 2:42 a.m.18 views

CVE-2024-24742 Cross-Site Scripting (XSS) vulnerability in SAP CRM (WebClient UI)

SAP CRM WebClient UI - version S4FND 102, S4FND 103, S4FND 104, S4FND 105, S4FND 106, WEBCUIF 701, WEBCUIF 731, WEBCUIF 746, WEBCUIF 747, WEBCUIF 748, WEBCUIF 800, WEBCUIF 801, does not sufficiently encode user-controlled inputs, resulting in Cross-Site Scripting XSS vulnerability. An attacker wi...

4.1CVSS4.5AI score0.00222EPSS
Exploits0References2
Cvelist
Cvelist
added 2024/02/13 2:29 a.m.15 views

CVE-2024-22130 Cross-Site Scripting (XSS) vulnerability in SAP CRM WebClient UI

Print preview option in SAP CRM WebClient UI - versions S4FND 102, S4FND 103, S4FND 104, S4FND 105, S4FND 106, S4FND 107, S4FND 108, WEBCUIF 700, WEBCUIF 701, WEBCUIF 730, WEBCUIF 731, WEBCUIF 746, WEBCUIF 747, WEBCUIF 748, WEBCUIF 800, WEBCUIF 801, does not sufficiently encode user-controlled...

7.6CVSS7.2AI score0.0038EPSS
Exploits0References2
Positive Technologies
Positive Technologies
added 2024/02/12 12:0 a.m.1 views

PT-2024-3898 · Sap · Sap Crm Webclient Ui

Name of the Vulnerable Software and Affected Versions: SAP CRM WebClient UI versions S4FND 102 through S4FND 106 SAP CRM WebClient UI versions WEBCUIF 701 through WEBCUIF 801 Description: The SAP CRM WebClient UI does not sufficiently encode user-controlled inputs, resulting in a Cross-Site...

4.1CVSS5.8AI score0.00222EPSS
Exploits0References7
NVD
NVD
added 2023/05/09 2:15 a.m.12 views

CVE-2023-30742

SAP CRM WebClient UI - versions S4FND 102, S4FND 103, S4FND 104, S4FND 105, S4FND 106, S4FND 107, WEBCUIF 700, WEBCUIF 701, WEBCUIF 731, WEBCUIF 746, WEBCUIF 747, WEBCUIF 748, WEBCUIF 800, WEBCUIF 801, does not sufficiently encode user-controlled inputs, resulting in a stored Cross-Site Scripting...

6.1CVSS6AI score0.00442EPSS
Exploits0References2
CVE
CVE
added 2023/05/09 12:57 a.m.42 views

CVE-2023-29188

The CVE-2023-29188 issue affects SAP CRM WebClient UI and related components: SAPSCORE 129, S4FND 102–107, WEBCUIF 701–801. The vulnerability is a Cross-Site Scripting (XSS) flaw caused by insufficient encoding of user-controlled inputs. Successful exploitation could allow a user with normal acce...

5.4CVSS5.3AI score0.00404EPSS
Exploits0References2Affected Software3
Positive Technologies
Positive Technologies
added 2023/05/09 12:0 a.m.1 views

PT-2023-2940 · Sap · Sap Crm Webclient Ui

Name of the Vulnerable Software and Affected Versions: SAP CRM WebClient UI versions SAPSCORE 129, S4FND 102 through S4FND 107, WEBCUIF 701 through WEBCUIF 801 Description: The SAP CRM WebClient UI does not sufficiently encode user-controlled inputs, resulting in a Cross-Site Scripting XSS issue...

5.5CVSS5.2AI score0.00404EPSS
Exploits0References5
NVD
NVD
added 2023/02/14 4:15 a.m.15 views

CVE-2023-24525

SAP CRM WebClient UI - versions WEBCUIF 748, 800, 801, S4FND 102, 103, does not sufficiently encode user-controlled inputs, resulting in Cross-Site Scripting XSS vulnerability. On successful exploitation an authenticated attacker can cause limited impact on confidentiality of the application...

5.4CVSS4.6AI score0.00498EPSS
Exploits0References2
Prion
Prion
added 2023/02/14 4:15 a.m.15 views

Cross site scripting

SAP CRM WebClient UI - versions WEBCUIF 748, 800, 801, S4FND 102, 103, does not sufficiently encode user-controlled inputs, resulting in Cross-Site Scripting XSS vulnerability. On successful exploitation an authenticated attacker can cause limited impact on confidentiality of the application...

4.9CVSS5.2AI score0.00498EPSS
Exploits0References2Affected Software2
CNNVD
CNNVD
added 2023/02/14 12:0 a.m.2 views

SAP CRM 跨站脚本漏洞

SAP CRM is a customer relationship management system from SAP, Germany. A cross-site scripting vulnerability exists in SAP CRM WebClient UI WEBCUIF version 748, version 800, version 801, S4FND version 102, version 103, which stems from not adequately coding user input...

5.4CVSS5.3AI score0.00498EPSS
Exploits0References3
Prion
Prion
added 2020/05/12 6:15 p.m.12 views

Sql injection

The use of an admin backend report within SAP Master Data Governance, versions - S4CORE 101, S4FND 102, 103, 104, SAPBSFND 748; allows an attacker to execute crafted database queries, exposing the backend database, leading to SQL Injection...

6.5CVSS8.8AI score0.004EPSS
Exploits0References2Affected Software3
Prion
Prion
added 2019/01/08 8:29 p.m.21 views

Cross site scripting

SAP CRM WebClient UI fixed in SAPSCORE 1.12; S4FND 1.02; WEBCUIF 7.31, 7.46, 7.47, 7.48, 8.0, 8.01 does not sufficiently encode user-controlled inputs, resulting in Cross-Site Scripting XSS vulnerability...

3.5CVSS5.3AI score0.00299EPSS
Exploits0References3Affected Software3
OSV
OSV
added 2019/01/08 8:29 p.m.0 views

CVE-2019-0244

SAP CRM WebClient UI fixed in SAPSCORE 1.12; S4FND 1.02; WEBCUIF 7.31, 7.46, 7.47, 7.48, 8.0, 8.01 does not sufficiently encode user-controlled inputs, resulting in Cross-Site Scripting XSS vulnerability...

5.4CVSS5.8AI score0.00299EPSS
Exploits0References3
NVD
NVD
added 2019/01/08 8:29 p.m.11 views

CVE-2019-0244

SAP CRM WebClient UI fixed in SAPSCORE 1.12; S4FND 1.02; WEBCUIF 7.31, 7.46, 7.47, 7.48, 8.0, 8.01 does not sufficiently encode user-controlled inputs, resulting in Cross-Site Scripting XSS vulnerability...

5.4CVSS5.3AI score0.00299EPSS
Exploits0References3
NVD
NVD
added 2019/01/08 8:29 p.m.15 views

CVE-2019-0245

SAP CRM WebClient UI fixed in SAPSCORE 1.12; S4FND 1.02; WEBCUIF 7.31, 7.46, 7.47, 7.48, 8.0, 8.01 does not sufficiently encode user-controlled inputs, resulting in Cross-Site Scripting XSS vulnerability...

5.4CVSS5.3AI score0.00299EPSS
Exploits0References3
CVE
CVE
added 2019/01/08 8:0 p.m.43 views

CVE-2019-0244

CVE-2019-0244 affects SAP CRM WebClient UI components (SAPSCORE, S4FND, WEBCUIF). The vulnerability arises from insufficient encoding of user-controlled inputs, enabling Cross-Site Scripting (XSS). Affected product areas: SAP CRM WebClient UI; fixed in SAPSCORE 1.12; S4FND 1.02; WEBCUIF 7.31, 7.4...

5.4CVSS5.3AI score0.00299EPSS
Exploits0References3Affected Software1
Cvelist
Cvelist
added 2019/01/08 8:0 p.m.16 views

CVE-2019-0244

SAP CRM WebClient UI fixed in SAPSCORE 1.12; S4FND 1.02; WEBCUIF 7.31, 7.46, 7.47, 7.48, 8.0, 8.01 does not sufficiently encode user-controlled inputs, resulting in Cross-Site Scripting XSS vulnerability...

5.3AI score0.00299EPSS
Exploits0References3
Rows per page
Query Builder