4 matches found
CVE-2017-15294
The Java administration console in SAP CRM has XSS. This is SAP Security Note 2478964.
CVE-2017-15296
The Java component in SAP CRM has CSRF. This is SAP Security Note 2478964.
CVE-2021-33676
A missing authority check in SAP CRM, versions - 700, 701, 702, 712, 713, 714, could be leveraged by an attacker with high privileges to compromise confidentiality, integrity, or availability of the system.
CVE-2023-27897
In SAP CRM - versions 700, 701, 702, 712, 713, an attacker who is authenticated with a non-administrative role and a common remote execution authorization can use a vulnerable interface to execute an application function to perform actions which they would not normally be permitted to perform. Depe...