← CVE Intelligence

CVE-2026-44768

Security misconfiguration in SAP CRM (WebClient UI) PUBLISHED

Description (CNA)

SAP CRM WebClient UI allows an attacker to inject and execute malicious scripts in the context of the application due to the absence of a Content Security Policy (CSP) configuration for certain restrictive directives. This vulnerability has a low impact on the integrity of the application. Confidentiality and availability are not impacted.

Affected (CNA)

Vendor / productVersions
SAP_SE / SAP CRM (WebClient UI)affected S4FND 104; affected 105; affected 106

CWE

CWE-15

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.