CVE-2014-1962

概要

参考情報

• scn.sap.com/docs/DOC-8218
• secunia.com/advisories/56944 · Vendor Advisory
• erpscan.io/advisories/erpscan-14-003-sap-crm-gwsync-xxe
• exchange.xforce.ibmcloud.com/vulnerabilities/91098
• service.sap.com/sap/support/notes/1917054

customer relationship management のその他の脆弱性

• CVE-2023-27897中 6.3In SAP CRM - versions 700, 701, 702, 712, 713, an attacker who is authenticated with a non-administrative role and a common remote execution…
• CVE-2021-33676高 7.2A missing authority check in SAP CRM, versions - 700, 701, 702, 712, 713, 714, could be leveraged by an attacker with high privileges to com…
• CVE-2018-2380中 6.6悪用確認済み（CISA KEV）SAP CRM, 7.01, 7.02,7.30, 7.31, 7.33, 7.54, allows an attacker to exploit insufficient validation of path information provided by users, thu…
• CVE-2017-15296高 8.8The Java component in SAP CRM has CSRF. This is SAP Security Note 2478964.
• CVE-2017-15294中 6.1The Java administration console in SAP CRM has XSS. This is SAP Security Note 2478964.