Custom CSS support option in SAP CRM WebClient
UI does not sufficiently encode user-controlled inputs resulting in Cross-Site
Scripting vulnerability. On successful exploitation an attacker can cause
limited impact on confidentiality and integrity of the application.
References
Configurations
No configuration.
History
No history.
Information
Published : 2024-07-09 04:15
Updated : 2024-07-09 18:19
NVD link : CVE-2024-37174
Mitre link : CVE-2024-37174
CVE.ORG link : CVE-2024-37174
JSON object : View
Products Affected
No product.
CWE
CWE-79
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')