Customer Relationship Management S4fnd (Sap) - vulnerabilities (CVEs)

6 CVEs, 0 in the last 30 days, 7 known versions, newest CVE from 2024-07-09. Vendor: Sap.

CVEs of Customer Relationship Management S4fnd

• CVE-2024-37175 - CVSS 6.5 (medium), 2024-07-09: SAP CRM WebClient does not perform necessary authorization check for an authenticated user, resulting in escalation of privileges. This could allow an…
• CVE-2024-39598 - CVSS 7.7 (high), 2024-07-09: SAP CRM (WebClient UI Framework) allows an authenticated attacker to enumerate accessible HTTP endpoints in the internal network by specially crafting HTTP…
• CVE-2024-37174 - CVSS 6.1 (medium), 2024-07-09: Custom CSS support option in SAP CRM WebClient UI does not sufficiently encode user-controlled inputs resulting in Cross-Site Scripting vulnerability. On…
• CVE-2024-37173 - CVSS 6.1 (medium), 2024-07-09: Due to insufficient input validation, SAP CRM WebClient UI allows an unauthenticated attacker to craft a URL link which embeds a malicious script. When a…
• CVE-2023-30742 - CVSS 6.1 (medium), 2023-05-09: SAP CRM (WebClient UI) - versions S4FND 102, S4FND 103, S4FND 104, S4FND 105, S4FND 106, S4FND 107, WEBCUIF 700, WEBCUIF 701, WEBCUIF 731, WEBCUIF 746,…
• CVE-2023-29189 - CVSS 5.4 (medium), 2023-04-11: SAP CRM (WebClient UI) - versions S4FND 102, 103, 104, 105, 106, 107, WEBCUIF, 700, 701, 731, 730, 746, 747, 748, 800, 801, allows an authenticated attacker…