Description (CNA)
Due to insufficient input validation, SAP CRM WebClient UI allows an unauthenticated attacker to craft a URL link which embeds a malicious script. When a victim clicks on this link, the script will be executed in the victim's browser giving the attacker the ability to access and/or modify information with no effect on availability of the application.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| SAP_SE / SAP CRM WebClient UI | affected S4FND 102; affected S4FND 103; affected S4FND 104; affected S4FND 105; affected S4FND 106; affected S4FND 107; affected S4FND 108; affected WEBCUIF 701; affected WEBCUIF 731; affected WEBCUIF 746; affected WEBCUIF 747; affected WEBCUIF 748; affected WEBCUIF 800; affected WEBCUIF 801 |
CWE
CWE-79
References
ADP enrichment
No English description supplied.
No references supplied.
No English description supplied.