Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

sap customer relationship management - vulnerabilities and exploits

(subscribe to this query)
4.3
CVSSv2
CVE-2017-15294
The Java administration console in SAP CRM has XSS. This is SAP Security Note 2478964.
Sap Customer Relationship Management 700Sap Customer Relationship Management 701Sap Customer Relationship Management 702Sap Customer Relationship Management 731Sap Customer Relationship Management 730Sap Customer Relationship Management 733Sap Customer Relationship Management 732Sap Customer Relationship Management 754
6.8
CVSSv2
CVE-2017-15296
The Java component in SAP CRM has CSRF. This is SAP Security Note 2478964.
Sap Customer Relationship Management 702Sap Customer Relationship Management 731Sap Customer Relationship Management 700Sap Customer Relationship Management 701Sap Customer Relationship Management 733Sap Customer Relationship Management 754Sap Customer Relationship Management 730Sap Customer Relationship Management 732
6.5
CVSSv2
CVE-2018-2380
SAP CRM, 7.01, 7.02,7.30, 7.31, 7.33, 7.54, allows an malicious user to exploit insufficient validation of path information provided by users, thus characters representing "traverse to parent directory" are passed through to the file APIs.
Sap Customer Relationship Management 7.33Sap Customer Relationship Management 7.01Sap Customer Relationship Management 7.02Sap Customer Relationship Management 7.30Sap Customer Relationship Management 7.31Sap Customer Relationship Management 7.54
6.5
CVSSv2
CVE-2021-33676
A missing authority check in SAP CRM, versions - 700, 701, 702, 712, 713, 714, could be leveraged by an attacker with high privileges to compromise confidentiality, integrity, or availability of the system.
Sap Customer Relationship Management 700Sap Customer Relationship Management 701Sap Customer Relationship Management 702Sap Customer Relationship Management 712Sap Customer Relationship Management 713Sap Customer Relationship Management 714
NA
CVE-2023-27897
In SAP CRM - versions 700, 701, 702, 712, 713, an attacker who is authenticated with a non-administrative role and a common remote execution authorization can use a vulnerable interface to execute an application function to perform actions which they would not normally be permitt...
Sap Customer Relationship Management 700Sap Customer Relationship Management 701Sap Customer Relationship Management 702Sap Customer Relationship Management 712Sap Customer Relationship Management 713
NA
CVE-2023-30742
SAP CRM (WebClient UI) - versions S4FND 102, S4FND 103, S4FND 104, S4FND 105, S4FND 106, S4FND 107, WEBCUIF 700, WEBCUIF 701, WEBCUIF 731, WEBCUIF 746, WEBCUIF 747, WEBCUIF 748, WEBCUIF 800, WEBCUIF 801, does not sufficiently encode user-controlled inputs, resulting in a stored C...
Sap Customer Relationship Management Webclient Ui 700Sap Customer Relationship Management Webclient Ui 731Sap Customer Relationship Management Webclient Ui 746Sap Customer Relationship Management Webclient Ui 747Sap Customer Relationship Management Webclient Ui 748Sap Customer Relationship Management Webclient Ui 800Sap Customer Relationship Management Webclient Ui 801Sap Customer Relationship Management S4fnd 103Sap Customer Relationship Management S4fnd 104Sap Customer Relationship Management S4fnd 105Sap Customer Relationship Management Webclient Ui 701Sap Customer Relationship Management S4fnd 102Sap Customer Relationship Management S4fnd 106Sap Customer Relationship Management S4fnd 107
NA
CVE-2023-29189
SAP CRM (WebClient UI) - versions S4FND 102, 103, 104, 105, 106, 107, WEBCUIF, 700, 701, 731, 730, 746, 747, 748, 800, 801, allows an authenticated malicious user to modify HTTP verbs used in requests to the web server. This application is exposed over the network and successful ...
Sap Customer Relationship Management Webclient Ui 700Sap Customer Relationship Management Webclient Ui 731Sap Customer Relationship Management Webclient Ui 730Sap Customer Relationship Management Webclient Ui 746Sap Customer Relationship Management Webclient Ui 747Sap Customer Relationship Management Webclient Ui 748Sap Customer Relationship Management Webclient Ui 800Sap Customer Relationship Management Webclient Ui 801Sap Customer Relationship Management S4fnd 103Sap Customer Relationship Management S4fnd 104Sap Customer Relationship Management S4fnd 105Sap Customer Relationship Management Webclient Ui 701Sap Customer Relationship Management S4fnd 102
3.5
CVSSv2
CVE-2019-0368
SAP Customer Relationship Management (Email Management), versions: S4CRM prior to 1.0 and 2.0, BBPCRM prior to 7.0, 7.01, 7.02, 7.12, 7.13 and 7.14, does not sufficiently encode user-controlled inputs within the mail client resulting in Cross-Site Scripting vulnerability.
Sap Customer Relationship Management S4crm 1.0Sap Customer Relationship Management S4crm 2.0Sap Customer Relationship Management Bbpcrm 7.0Sap Customer Relationship Management Bbpcrm 7.01Sap Customer Relationship Management Bbpcrm 7.02Sap Customer Relationship Management Bbpcrm 7.13Sap Customer Relationship Management Bbpcrm 7.12Sap Customer Relationship Management Bbpcrm 7.14
NA
CVE-2023-24525
SAP CRM WebClient UI - versions WEBCUIF 748, 800, 801, S4FND 102, 103, does not sufficiently encode user-controlled inputs, resulting in Cross-Site Scripting (XSS) vulnerability. On successful exploitation an authenticated attacker can cause limited impact on confidentiality of t...
Sap Customer Relationship Management Webclient Ui 7.01Sap Customer Relationship Management Webclient Ui 7.31Sap Customer Relationship Management Webclient Ui 7.48Sap Customer Relationship Management Webclient Ui 8.00Sap Customer Relationship Management Webclient Ui 8.01Sap Customer Relationship Management Webclient Ui 7.00Sap Customer Relationship Management Webclient Ui 7.02Sap Customer Relationship Management Webclient Ui 7.40Sap Customer Relationship Management Webclient Ui 7.50Sap Customer Relationship Management Webclient Ui 7.52Sap S4fnd 1.02Sap S4fnd 1.03
4.3
CVSSv2
CVE-2018-2364
SAP CRM WebClient UI 7.01, 7.31, 7.46, 7.47, 7.48, 8.00, 8.01, S4FND 1.02, does not sufficiently validate and/or encode hidden fields, resulting in Cross-Site Scripting (XSS) vulnerability.
Sap Customer Relationship Management Webclient Ui 7.46Sap Customer Relationship Management Webclient Ui 7.47Sap Customer Relationship Management Webclient Ui 7.48Sap Customer Relationship Management Webclient Ui 8.00Sap Customer Relationship Management Webclient Ui 8.01Sap Customer Relationship Management Webclient Ui 7.31Sap Customer Relationship Management Webclient Ui 7.01Sap S4fnd 1.02
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2020-4463CVE-2024-29895injectCVE-2023-52689CVE-2024-5049CVE-2024-5051privilege escalationphysicalCVE-2023-52676
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook