CVE-2017-15294

Mô tả

Tham khảo

• securityfocus.com/bid/99532 · Third Party Advisory
• blogs.sap.com/2017/07/11/sap-security-patch-day-july-2017 · Issue Tracking
• erpscan.io/advisories/erpscan-17-035-xss-crm-administration-console-java · Third Party Advisory

Lỗ hổng khác của customer relationship management

• CVE-2023-27897TRUNG BÌNH 6.3In SAP CRM - versions 700, 701, 702, 712, 713, an attacker who is authenticated with a non-administrative role and a common remote execution…
• CVE-2021-33676CAO 7.2A missing authority check in SAP CRM, versions - 700, 701, 702, 712, 713, 714, could be leveraged by an attacker with high privileges to com…
• CVE-2018-2380TRUNG BÌNH 6.6ĐANG BỊ KHAI THÁC (CISA KEV)SAP CRM, 7.01, 7.02,7.30, 7.31, 7.33, 7.54, allows an attacker to exploit insufficient validation of path information provided by users, thu…
• CVE-2017-15296CAO 8.8The Java component in SAP CRM has CSRF. This is SAP Security Note 2478964.
• CVE-2014-1962TRUNG BÌNH 5.0Gwsync in SAP CRM 7.02 EHP 2 allows remote attackers to obtain sensitive information via unspecified vectors, related to an XML External Ent…