CRM
3 notes since January 2023.
Priority is derived from CVSS, not SAP’s priority: CVSS 9.0 or higher is Critical, 7.0 or higher High, 4.0 or higher Medium, below 4.0 Low. SAP’s own priority is only on SAP for Me (SAP login required).
| Patch Day | Note | Title | Priority (derived from CVSS, not SAP’s priority) | CVSS |
|---|---|---|---|---|
| April 2023 | 3309056 | Code Injection vulnerability in SAP CRM | Medium | 6.0 |
| April 2023 | 3269352 | HTTP Verb Tampering vulnerability in SAP CRM (WebClient UI) | Medium | 5.4 |
| February 2023 | 2788178 | SAP CRM WebClient UI - versions WEBCUIF 748, 800, 801, S4FND 102, 103, does not sufficiently encode user-controlled inputs, resulting in Cross-Site Scripting (XSS) vulnerability. | Medium | 4.3 |