CVE-2024-39598

概要

参考情報

• me.sap.com/notes/3467377 · Permissions Required
• url.sap/sapsecuritypatchday · Vendor Advisory

customer relationship management s4fnd のその他の脆弱性

• CVE-2024-37175中 6.5SAP CRM WebClient does not perform necessary authorization check for an authenticated user, resulting in escalation of privileges. This coul…
• CVE-2024-37174中 6.1Custom CSS support option in SAP CRM WebClient UI does not sufficiently encode user-controlled inputs resulting in Cross-Site Scripting vuln…
• CVE-2024-37173中 6.1Due to insufficient input validation, SAP CRM WebClient UI allows an unauthenticated attacker to craft a URL link which embeds a malicio…
• CVE-2023-30742中 6.1SAP CRM (WebClient UI) - versions S4FND 102, S4FND 103, S4FND 104, S4FND 105, S4FND 106, S4FND 107, WEBCUIF 700, WEBCUIF 701, WEBCUIF 731, W…
• CVE-2023-29189中 5.4SAP CRM (WebClient UI) - versions S4FND 102, 103, 104, 105, 106, 107, WEBCUIF, 700, 701, 731, 730, 746, 747, 748, 800, 801, allows an authen…