CVE-2019-0368

SAP Customer Relationship Management Email Management, versions: S4CRM before 1.0 and 2.0, BBPCRM before 7.0, 7.01, 7.02, 7.12, 7.13 and 7.14, does not sufficiently encode user-controlled inputs within the mail client resulting in Cross-Site Scripting vulnerability...

CVE-2021-33676

A missing authority check in SAP CRM, versions - 700, 701, 702, 712, 713, 714, could be leveraged by an attacker with high privileges to compromise confidentiality, integrity, or availability of the system...

PT-2019-4303

Name of the Vulnerable Software and Affected Versions SAP Customer Relationship Management versions prior to 1.0 and 2.0 SAP Customer Relationship Management Email Management versions prior to 7.0, excluding 7.0, 7.01, 7.02, 7.12, 7.13, and 7.14 Description The issue is related to the lack of inp...

CVE-2019-0368: Improper Neutralization of Input During Web Page Generation

SAP Customer Relationship Management Email Management, versions: S4CRM before 1.0 and 2.0, BBPCRM before 7.0, 7.01, 7.02, 7.12, 7.13 and 7.14, does not sufficiently encode user-controlled inputs within the mail client resulting in Cross-Site Scripting vulnerability...

PT-2013-6271

Name of the Vulnerable Software and Affected Versions SAP Customer Relationship Management CRM version 7.02 EHP 2 Description The issue is related to an XML External Entity XXE problem in the XML parser, specifically crm flex data, which has unknown impact and attack vectors. Recommendations For...

CVE-2013-7095: Undefined Security Weakness

The XML parser crmflexdata in SAP Customer Relationship Management CRM 7.02 EHP 2 has unknown impact and attack vectors related to an XML External Entity XXE issue...