← CVE Intelligence

CVE-2024-37174

[Multiple CVEs] Multiple vulnerabilities in SAP CRM (WebClient UI) PUBLISHED

Description (CNA)

Custom CSS support option in SAP CRM WebClient UI does not sufficiently encode user-controlled inputs resulting in Cross-Site Scripting vulnerability. On successful exploitation an attacker can cause limited impact on confidentiality and integrity of the application.

Affected (CNA)

Vendor / productVersions
SAP_SE / SAP CRM WebClient UIaffected S4FND 102; affected S4FND 103; affected S4FND 104; affected S4FND 105; affected S4FND 106; affected S4FND 107; affected S4FND 108; affected WEBCUIF 701; affected WEBCUIF 731; affected WEBCUIF 746; affected WEBCUIF 747; affected WEBCUIF 748; affected WEBCUIF 800; affected WEBCUIF 801

CWE

CWE-79

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.

CVE

No English description supplied.