CVE-2018-2364
SAP CRM WebClient UI 7.01, 7.31, 7.46, 7.47, 7.48, 8.00, 8.01, S4FND 1.02, does not sufficiently validate and/or encode hidden fields, resulting in Cross-Site Scripting (XSS) vulnerability.
| Software | From | Fixed in |
|---|---|---|
| sap / customer_relationship_management_webclient_ui | 7.01 | 7.01.x |
| sap / customer_relationship_management_webclient_ui | 7.31 | 7.31.x |
| sap / customer_relationship_management_webclient_ui | 7.46 | 7.46.x |
| sap / customer_relationship_management_webclient_ui | 7.47 | 7.47.x |
| sap / customer_relationship_management_webclient_ui | 7.48 | 7.48.x |
| sap / customer_relationship_management_webclient_ui | 8.00 | 8.00.x |
| sap / customer_relationship_management_webclient_ui | 8.01 | 8.01.x |
| sap / s4fnd | 1.02 | 1.02.x |
Deep Security Visibility Without the Complexity
SynScan provides clear, real-time security insights so you can monitor your attack surface, spot risks early, and act fast—without extra complexity.
- No setup fees
- 5-min deployment
- Cancel anytime