Lucene search
K

11 matches found

Positive Technologies
Positive Technologies
added 2024/02/12 12:0 a.m.2 views

PT-2024-3898 · Sap · Sap Crm Webclient Ui

Name of the Vulnerable Software and Affected Versions: SAP CRM WebClient UI versions S4FND 102 through S4FND 106 SAP CRM WebClient UI versions WEBCUIF 701 through WEBCUIF 801 Description: The SAP CRM WebClient UI does not sufficiently encode user-controlled inputs, resulting in a Cross-Site...

4.1CVSS5.8AI score0.00222EPSS
Exploits0References7
OSV
OSV
added 2023/05/09 2:15 a.m.1 views

CVE-2023-30742

SAP CRM WebClient UI - versions S4FND 102, S4FND 103, S4FND 104, S4FND 105, S4FND 106, S4FND 107, WEBCUIF 700, WEBCUIF 701, WEBCUIF 731, WEBCUIF 746, WEBCUIF 747, WEBCUIF 748, WEBCUIF 800, WEBCUIF 801, does not sufficiently encode user-controlled inputs, resulting in a stored Cross-Site Scripting...

6.1CVSS6.4AI score
Exploits0References2
CNNVD
CNNVD
added 2023/04/11 12:0 a.m.1 views

SAP CRM 安全漏洞

SAP CRM is a customer relationship management system from SAP, Germany. A security vulnerability exists in SAP CRM WebClient UI that originates from a vulnerability that allows an attacker to modify the HTTP verbs used in a request via a web server, which could lead to the exposure of form fields...

5.4CVSS5.7AI score0.00243EPSS
Exploits0References3
Positive Technologies
Positive Technologies
added 2023/04/11 12:0 a.m.2 views

PT-2023-22191 · Sap · Sap Crm

Name of the Vulnerable Software and Affected Versions: SAP CRM WebClient UI versions S4FND 102, 103, 104, 105, 106, 107, WEBCUIF, 700, 701, 731, 730, 746, 747, 748, 800, 801 Description: The issue allows an authenticated attacker to modify HTTP verbs used in requests to the web server. This...

5.4CVSS5.2AI score0.00243EPSS
Exploits0References5
NVD
NVD
added 2023/03/31 7:15 p.m.11 views

CVE-2023-23594

An authentication bypass vulnerability in the web client interface for the CL4NX printer before firmware version 1.13.3-u724r2 provides remote unauthenticated attackers with access to execute commands intended only for valid/authenticated users, such as file uploads and configuration changes...

9.8CVSS9.9AI score0.06633EPSS
Exploits0References3
CVE
CVE
added 2023/03/31 12:0 a.m.46 views

CVE-2023-23594

The CVE-2023-23594 case concerns the CL4NX printer web client interface. Affected: CL4NX printer firmware prior to 1.13.3-u724_r2; vulnerability is an authentication bypass allowing remote, unauthenticated attackers to perform actions intended for authenticated users (e.g., file uploads, configur...

9.8CVSS9.8AI score0.06633EPSS
Exploits0References3Affected Software1
Cvelist
Cvelist
added 2023/03/31 12:0 a.m.10 views

CVE-2023-23594

An authentication bypass vulnerability in the web client interface for the CL4NX printer before firmware version 1.13.3-u724r2 provides remote unauthenticated attackers with access to execute commands intended only for valid/authenticated users, such as file uploads and configuration changes...

10AI score0.06633EPSS
Exploits0References3
CNVD
CNVD
added 2017/11/07 12:0 a.m.2 views

Unspecified Spoofing Vulnerability in SAP Customer Relationship Management (CRM) IC WebClient

SAP Customer Relationship Management is a customer relationship management solution. An unspecified spoofing vulnerability exists in SAP Customer Relationship Management CRM IC WebClient, which can be exploited by attackers to conduct spoofing attacks and perform unauthorized operations...

6.8AI score
Exploits0References1
CNVD
CNVD
added 2017/08/22 12:0 a.m.1 views

SAP Customer Relationship Management (CRM) WebClient UI Cross-Site Scripting Vulnerability

SAP Customer Relationship Management is a customer relationship management solution. A cross-site scripting vulnerability exists in the SAP Customer Relationship Management CRM WebClient UI. A remote attacker could exploit the vulnerability to execute arbitrary script code in an unsuspecting user...

6.8AI score
Exploits0References1
NVD
NVD
added 2014/06/05 5:55 p.m.9 views

CVE-2014-3878

Multiple cross-site scripting XSS vulnerabilities in the web client interface in Ipswitch IMail Server 12.3 and 12.4, possibly before 12.4.1.15, allow remote attackers to inject arbitrary web script or HTML via 1 the Name field in an add new contact action in the Contacts section or unspecified...

4.3CVSS6.8AI score0.00311EPSS
Exploits2References5
CVE
CVE
added 2014/06/05 5:0 p.m.43 views

CVE-2014-3878

Ipswitch IMail Server web client interface (12.3 and 12.4, possibly before 12.4.1.15) contains multiple cross-site scripting (XSS) vulnerabilities. The flaws allow remote attackers to inject arbitrary web script or HTML via (1) the Name field when adding a new contact, (2) an Add Group action in ...

4.3CVSS5.9AI score0.00311EPSS
Exploits2References5Affected Software1
Rows per page
Query Builder