Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

sap s4fnd 104 vulnerabilities and exploits

(subscribe to this query)
NA
CVE-2024-24742
SAP CRM WebClient UI - version S4FND 102, S4FND 103, S4FND 104, S4FND 105, S4FND 106, WEBCUIF 701, WEBCUIF 731, WEBCUIF 746, WEBCUIF 747, WEBCUIF 748, WEBCUIF 800, WEBCUIF 801, does not sufficiently encode user-controlled inputs, resulting in Cross-Site Scripting (XSS) vulnerabil...
NA
CVE-2024-22130
Print preview option in SAP CRM WebClient UI - versions S4FND 102, S4FND 103, S4FND 104, S4FND 105, S4FND 106, S4FND 107, S4FND 108, WEBCUIF 700, WEBCUIF 701, WEBCUIF 730, WEBCUIF 731, WEBCUIF 746, WEBCUIF 747, WEBCUIF 748, WEBCUIF 800, WEBCUIF 801, does not sufficiently encode u...
6.1
CVSSv3
CVE-2023-30742
SAP CRM (WebClient UI) - versions S4FND 102, S4FND 103, S4FND 104, S4FND 105, S4FND 106, S4FND 107, WEBCUIF 700, WEBCUIF 701, WEBCUIF 731, WEBCUIF 746, WEBCUIF 747, WEBCUIF 748, WEBCUIF 800, WEBCUIF 801, does not sufficiently encode user-controlled inputs, resulting in a stored C...
Sap Customer Relationship Management Webclient Ui 700Sap Customer Relationship Management Webclient Ui 731Sap Customer Relationship Management Webclient Ui 746Sap Customer Relationship Management Webclient Ui 747Sap Customer Relationship Management Webclient Ui 748Sap Customer Relationship Management Webclient Ui 800Sap Customer Relationship Management Webclient Ui 801Sap Customer Relationship Management S4fnd 103Sap Customer Relationship Management S4fnd 104Sap Customer Relationship Management S4fnd 105Sap Customer Relationship Management Webclient Ui 701Sap Customer Relationship Management S4fnd 102Sap Customer Relationship Management S4fnd 106Sap Customer Relationship Management S4fnd 107
5.4
CVSSv3
CVE-2023-29188
SAP CRM WebClient UI - versions SAPSCORE 129, S4FND 102, S4FND 103, S4FND 104, S4FND 105, S4FND 106, S4FND 107, WEBCUIF 701, WEBCUIF 731, WEBCUIF 746, WEBCUIF 747, WEBCUIF 748, WEBCUIF 800, WEBCUIF 801, does not sufficiently encode user-controlled inputs, resulting in Cross-Site ...
Sap Customer Relationship Management Webclient Ui 7.01Sap Customer Relationship Management Webclient Ui 7.31Sap Customer Relationship Management Webclient Ui 7.46Sap Customer Relationship Management Webclient Ui 7.47Sap Customer Relationship Management Webclient Ui 7.48Sap Customer Relationship Management Webclient Ui 8.00Sap Customer Relationship Management Webclient Ui 8.01Sap S4fnd 1.02Sap S4fnd 102Sap S4fnd 103Sap S4fnd 104Sap S4fnd 105Sap S4fnd 106Sap S4fnd 107Sap Sapscore 129
5.4
CVSSv3
CVE-2023-29189
SAP CRM (WebClient UI) - versions S4FND 102, 103, 104, 105, 106, 107, WEBCUIF, 700, 701, 731, 730, 746, 747, 748, 800, 801, allows an authenticated malicious user to modify HTTP verbs used in requests to the web server. This application is exposed over the network and successful ...
Sap Customer Relationship Management Webclient Ui 700Sap Customer Relationship Management Webclient Ui 731Sap Customer Relationship Management Webclient Ui 730Sap Customer Relationship Management Webclient Ui 746Sap Customer Relationship Management Webclient Ui 747Sap Customer Relationship Management Webclient Ui 748Sap Customer Relationship Management Webclient Ui 800Sap Customer Relationship Management Webclient Ui 801Sap Customer Relationship Management S4fnd 103Sap Customer Relationship Management S4fnd 104Sap Customer Relationship Management S4fnd 105Sap Customer Relationship Management Webclient Ui 701Sap Customer Relationship Management S4fnd 102
8.8
CVSSv3
CVE-2020-6249
The use of an admin backend report within SAP Master Data Governance, versions - S4CORE 101, S4FND 102, 103, 104, SAP_BS_FND 748; allows an malicious user to execute crafted database queries, exposing the backend database, leading to SQL Injection.
Sap Master Data Governance \\(s4core\\) 101Sap Master Data Governance \\(s4fnd\\) 102Sap Master Data Governance \\(s4fnd\\) 103Sap Master Data Governance \\(s4fnd\\) 104Sap Master Data Governance \\(sap Bs Fnd\\) 748
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2022-48654CVE-2024-2757authentication bypassCVE-2024-3194CVE-2024-33640CVE-2024-21111dosinsecure direct object referenceCVE-2024-21345
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook