Skip to main content

CVE mentions, exploit signals, and PoC evidence in one fast public view.

Vendor/product archive

sap / s4fnd CVEs

Beta · best-effort

5 CVEs tagged to sap / s4fnd — 0 Critical, 0 High, 5 Medium, 0 Low, 0 Unrated.

See this archive with more filters Back to sap vendor archive

CVE-2023-29188

Published May 9, 2023

SAP CRM WebClient UI - versions SAPSCORE 129, S4FND 102, S4FND 103, S4FND 104, S4FND 105, S4FND 106, S4FND 107, WEBCUIF 701, WEBCUIF 731, WEBCUIF 746, WEBCUIF 747, WEBCUIF 748, WE…

CVSS 5.4 · Medium

Vendor/product tagsBeta · best-effort

CVE-2023-24525

Published Feb 14, 2023

SAP CRM WebClient UI - versions WEBCUIF 748, 800, 801, S4FND 102, 103, does not sufficiently encode user-controlled inputs, resulting in Cross-Site Scripting (XSS) vulnerability.…

CVSS 4.3 · Medium

Vendor/product tagsBeta · best-effort

CVE-2019-0245

Published Jan 8, 2019

SAP CRM WebClient UI (fixed in SAPSCORE 1.12; S4FND 1.02; WEBCUIF 7.31, 7.46, 7.47, 7.48, 8.0, 8.01) does not sufficiently encode user-controlled inputs, resulting in Cross-Site S…

CVSS 5.4 · Medium

Vendor/product tagsBeta · best-effort

CVE-2019-0244

Published Jan 8, 2019

SAP CRM WebClient UI (fixed in SAPSCORE 1.12; S4FND 1.02; WEBCUIF 7.31, 7.46, 7.47, 7.48, 8.0, 8.01) does not sufficiently encode user-controlled inputs, resulting in Cross-Site S…

CVSS 5.4 · Medium

Vendor/product tagsBeta · best-effort

CVE-2018-2364

Published Feb 14, 2018

SAP CRM WebClient UI 7.01, 7.31, 7.46, 7.47, 7.48, 8.00, 8.01, S4FND 1.02, does not sufficiently validate and/or encode hidden fields, resulting in Cross-Site Scripting (XSS) vuln…

CVSS 6.1 · Medium

Vendor/product tagsBeta · best-effort

Showing 1-5 of 5 CVEsPage 1 of 1