Due to insufficient input validation, SAP
CRM WebClient UI allows an unauthenticated attacker to craft a URL link which
embeds a malicious script. When a victim clicks on this link, the script will
be executed in the victim's browser giving the attacker the ability to access
and/or modify information with no effect on availability of the application.
References
Configurations
No configuration.
History
No history.
Information
Published : 2024-07-09 04:15
Updated : 2024-07-09 18:19
NVD link : CVE-2024-37173
Mitre link : CVE-2024-37173
CVE.ORG link : CVE-2024-37173
JSON object : View
Products Affected
No product.
CWE
CWE-79
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')