CVE-2023-24525

Name of the Vulnerable Software and Affected Versions SAP CRM WebClient UI versions WEBCUIF 748, 800, 801, S4FND 102, 103

Description The issue is related to insufficient encoding of user-controlled inputs, resulting in a Cross-Site Scripting (XSS) vulnerability. On successful exploitation, an authenticated attacker can cause limited impact on the confidentiality of the application.

Recommendations For SAP CRM WebClient UI versions WEBCUIF 748, 800, 801, S4FND 102, 103, update to a version that sufficiently encodes user-controlled inputs to prevent Cross-Site Scripting (XSS) attacks. At the moment, there is no information about a newer version that contains a fix for this vulnerability.