CVE-2023-24525

Published: Feb 14, 2023Modified: Jun 17, 2026

5.4

Vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

Exploitability: 2.3 / Impact: 2.7

Source: NVD

Description

SAP CRM WebClient UI - versions WEBCUIF 748, 800, 801, S4FND 102, 103, does not sufficiently encode user-controlled inputs, resulting in Cross-Site Scripting (XSS) vulnerability. On successful exploitation an authenticated attacker can cause limited impact on confidentiality of the application.

Affected (12)

Products: Sap: Customer Relationship Management Webclient Ui, S4fnd

Sap

2 products

Customer Relationship Management Webclient Ui

S4fnd

Configuration A

10 vulnerable

Vulnerable Software	Affected Versions
Sap Customer Relationship Management Webclient Ui	Version 7.00
Sap Customer Relationship Management Webclient Ui	Version 7.01
Sap Customer Relationship Management Webclient Ui	Version 7.02
Sap Customer Relationship Management Webclient Ui	Version 7.31
Sap Customer Relationship Management Webclient Ui	Version 7.40
Sap Customer Relationship Management Webclient Ui	Version 7.48
Sap Customer Relationship Management Webclient Ui	Version 7.50
Sap Customer Relationship Management Webclient Ui	Version 7.52
Sap Customer Relationship Management Webclient Ui	Version 8.00
Sap Customer Relationship Management Webclient Ui	Version 8.01