CVE-2018-2364

Published: Feb 14, 2018Modified: Nov 21, 2024

6.1

Vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Exploitability: 2.8 / Impact: 2.7

Source: NVD

Description

SAP CRM WebClient UI 7.01, 7.31, 7.46, 7.47, 7.48, 8.00, 8.01, S4FND 1.02, does not sufficiently validate and/or encode hidden fields, resulting in Cross-Site Scripting (XSS) vulnerability.

Affected (8)

Products: Sap: Customer Relationship Management Webclient Ui, S4fnd

Sap

2 products

Customer Relationship Management Webclient Ui

S4fnd

Configuration A

7 vulnerable

Vulnerable Software	Affected Versions
Sap Customer Relationship Management Webclient Ui	Version 7.01
Sap Customer Relationship Management Webclient Ui	Version 7.31
Sap Customer Relationship Management Webclient Ui	Version 7.46
Sap Customer Relationship Management Webclient Ui	Version 7.47
Sap Customer Relationship Management Webclient Ui	Version 7.48
Sap Customer Relationship Management Webclient Ui	Version 8.00
Sap Customer Relationship Management Webclient Ui	Version 8.01