Description
Due to insufficient input validation, SAP CRM WebClient UI allows an unauthenticated attacker to craft a URL link which embeds a malicious script. When a victim clicks on this link, the script will be executed in the victim's browser giving the attacker the ability to access and/or modify information with no effect on availability of the application.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
SAP_SE SAP CRM WebClient UI
Default version status: unaffected
S4FND 102affected103affected104affected105affected106affected107affectedWEBCUIF 700affected701affected730affected731affected746affected747affected748affected800affected801affected