Vulnerability CVE-2024-37174


Published: 2024-07-09

Description:
Custom CSS support option in SAP CRM WebClient
UI does not sufficiently encode user-controlled inputs resulting in Cross-Site
Scripting vulnerability. On successful exploitation an attacker can cause
limited impact on confidentiality and integrity of the application.

Type:

CWE-79

(Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting'))

 References:
https://url.sap/sapsecuritypatchday
https://me.sap.com/notes/3467377

Copyright 2026, cxsecurity.com

 

Back to Top