Total vulnerabilities in the database
Due to insufficient input validation, SAP CRM WebClient UI allows an unauthenticated attacker to craft a URL link which embeds a malicious script. When a victim clicks on this link, the script will be executed in the victim's browser giving the attacker the ability to access and/or modify information with no effect on availability of the application.
| Software | From | Fixed in |
|---|---|---|
| sap / customer_relationship_management_webclient_ui | 731 | 731.x |
| sap / customer_relationship_management_webclient_ui | 746 | 746.x |
| sap / customer_relationship_management_webclient_ui | 747 | 747.x |
| sap / customer_relationship_management_webclient_ui | 748 | 748.x |
| sap / customer_relationship_management_webclient_ui | 800 | 800.x |
| sap / customer_relationship_management_webclient_ui | 801 | 801.x |
| sap / customer_relationship_management_s4fnd | 108 | 108.x |
| sap / customer_relationship_management_s4fnd | 107 | 107.x |
| sap / customer_relationship_management_s4fnd | 106 | 106.x |
| sap / customer_relationship_management_s4fnd | 102 | 102.x |
| sap / customer_relationship_management_webclient_ui | 701 | 701.x |
| sap / customer_relationship_management_s4fnd | 105 | 105.x |
| sap / customer_relationship_management_s4fnd | 104 | 104.x |
| sap / customer_relationship_management_s4fnd | 103 | 103.x |