CVE-2018-2364

Mô tả

Tham khảo

• securityfocus.com/bid/103002 · Third Party Advisory
• blogs.sap.com/2018/02/13/sap-security-patch-day-february-2018 · Vendor Advisory
• launchpad.support.sap.com · Permissions Required

Lỗ hổng khác của customer relationship management webclient ui

• CVE-2024-37175TRUNG BÌNH 6.5SAP CRM WebClient does not perform necessary authorization check for an authenticated user, resulting in escalation of privileges. This coul…
• CVE-2024-39598CAO 7.7SAP CRM (WebClient UI Framework) allows an authenticated attacker to enumerate accessible HTTP endpoints in the internal network by speciall…
• CVE-2024-37174TRUNG BÌNH 6.1Custom CSS support option in SAP CRM WebClient UI does not sufficiently encode user-controlled inputs resulting in Cross-Site Scripting vuln…
• CVE-2024-37173TRUNG BÌNH 6.1Due to insufficient input validation, SAP CRM WebClient UI allows an unauthenticated attacker to craft a URL link which embeds a malicio…
• CVE-2024-34686TRUNG BÌNH 6.1Due to insufficient input validation, SAP CRM WebClient UI allows an unauthenticated attacker to craft a URL link which embeds a malicious s…