| Package | Affected versions | Patched versions |
|---|---|---|
| customer relationship management webclient ui | = 7.00= 7.01= 7.02= 7.31= 7.40= 7.48= 7.50= 7.52= 8.00= 8.01 | |
| s4fnd | = 1.02= 1.03 |
SAP CRM WebClient UI - versions WEBCUIF 748, 800, 801, S4FND 102, 103, does not sufficiently encode user-controlled inputs, resulting in Cross-Site Scripting (XSS) vulnerability. On successful exploitation an authenticated attacker can cause limited impact on confidentiality of the application.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free