| Package | Affected versions | Patched versions |
|---|---|---|
| customer relationship management s4fnd | = 102= 103= 104= 105= 106= 107= 108 | |
| customer relationship management webclient ui | = 701= 731= 746= 747= 748= 800= 801 |
Due to insufficient input validation, SAP CRM WebClient UI allows an unauthenticated attacker to craft a URL link which embeds a malicious script. When a victim clicks on this link, the script will be executed in the victim's browser giving the attacker the ability to access and/or modify information with no effect on availability of the application.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free