CVE-2023-29189

Published: Apr 11, 2023Modified: Nov 21, 2024

5.4

Vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N

Exploitability: 2.8 / Impact: 2.5

Source: NVD

Description

SAP CRM (WebClient UI) - versions S4FND 102, 103, 104, 105, 106, 107, WEBCUIF, 700, 701, 731, 730, 746, 747, 748, 800, 801, allows an authenticated attacker to modify HTTP verbs used in requests to the web server. This application is exposed over the network and successful exploitation can lead to exposure of form fields

Affected (13)

Products: Sap: Customer Relationship Management S4fnd, Customer Relationship Management Webclient Ui

Sap

2 products

Customer Relationship Management S4fnd

Customer Relationship Management Webclient Ui

Configuration A

13 vulnerable

Vulnerable Software	Affected Versions
Sap Customer Relationship Management S4fnd	Version 102
Sap Customer Relationship Management S4fnd	Version 103
Sap Customer Relationship Management S4fnd	Version 104
Sap Customer Relationship Management S4fnd	Version 105
Sap Customer Relationship Management Webclient Ui	Version 700
Sap Customer Relationship Management Webclient Ui	Version 701
Sap Customer Relationship Management Webclient Ui	Version 730
Sap Customer Relationship Management Webclient Ui	Version 731
Sap Customer Relationship Management Webclient Ui	Version 746
Sap Customer Relationship Management Webclient Ui	Version 747
Sap Customer Relationship Management Webclient Ui	Version 748
Sap Customer Relationship Management Webclient Ui	Version 800
Sap Customer Relationship Management Webclient Ui	Version 801