medium4.3
CVE-2023-24525
SAP CRM WebClient UI - versions WEBCUIF 748, 800, 801, S4FND 102, 103, does not sufficiently encode user-controlled inputs, resulting in Cross-Site Scripting (…
Impact
SAP CRM WebClient UI - versions WEBCUIF 748, 800, 801, S4FND 102, 103, does not sufficiently encode user-controlled inputs, resulting in Cross-Site Scripting (XSS) vulnerability. On successful exploitation an authenticated attacker can cause limited impact on confidentiality of the application.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Sap | Customer Relationship Management Webclient Ui | Versions 7.00, 7.01, 7.02, 7.31, 7.40, 7.48 |
| Sap | S4fnd | Versions 1.02, 1.03 |