Description (CNA)
SAP CRM (WebClient UI) - versions S4FND 102, 103, 104, 105, 106, 107, WEBCUIF, 700, 701, 731, 730, 746, 747, 748, 800, 801, allows an authenticated attacker to modify HTTP verbs used in requests to the web server. This application is exposed over the network and successful exploitation can lead to exposure of form fields
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| SAP / CRM (WebClient UI) | affected S4FND 102; affected S4FND 103; affected S4FND 104; affected S4FND 105; affected S4FND 106; affected S4FND 107; affected WEBCUIF 700; affected WEBCUIF 701; affected WEBCUIF 731; affected WEBCUIF 730; affected WEBCUIF 746; affected WEBCUIF 747; affected WEBCUIF 748; affected WEBCUIF 800; affected WEBCUIF 801 |
CWE
CWE-23
References
- https://launchpad.support.sap.com/#/notes/3269352
- https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html
ADP enrichment
No English description supplied.
No English description supplied.
No references supplied.