| |
Vulnerability CVE-2024-37173
Published: 2024-07-09
| Description: |
Due to insufficient input validation, SAP
CRM WebClient UI allows an unauthenticated attacker to craft a URL link which
embeds a malicious script. When a victim clicks on this link, the script will
be executed in the victim's browser giving the attacker the ability to access
and/or modify information with no effect on availability of the application. |
Type:
CWE-79 (Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting'))
References: |
https://url.sap/sapsecuritypatchday
https://me.sap.com/notes/3467377
|
|
|
Copyright 2026, cxsecurity.com
|
|
|
