CVE-2023-30742
Cross-Site Scripting (XSS) vulnerability in SAP CRM (WebClient UI)
Severity Score
6.1
*CVSS v3.1
Exploit Likelihood
*EPSS
Affected Versions
*CPE
Public Exploits
0
*Multiple Sources
Exploited in Wild
-
*KEV
Decision
-
*SSVC
Descriptions
SAP CRM (WebClient UI) - versions S4FND 102, S4FND 103, S4FND 104, S4FND 105, S4FND 106, S4FND 107, WEBCUIF 700, WEBCUIF 701, WEBCUIF 731, WEBCUIF 746, WEBCUIF 747, WEBCUIF 748, WEBCUIF 800, WEBCUIF 801, does not sufficiently encode user-controlled inputs, resulting in a stored Cross-Site Scripting (XSS) vulnerability.An attacker could store a malicious URL and lure the victim to click, causing the script supplied by the attacker to execute in the victim user's session. The information from the victim's session could then be modified or read by the attacker.
*Credits:
N/A
CVSS Scores
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality
Integrity
Availability
* Common Vulnerability Scoring System
SSVC
- Decision:-
Exploitation
Automatable
Tech. Impact
* Organization's Worst-case Scenario
Timeline
- 2023-04-14 CVE Reserved
- 2023-05-09 CVE Published
- 2024-06-10 EPSS Updated
- 2024-08-02 CVE Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
- ---------- First Exploit
CWE
- CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CAPEC
References (1)
| URL | Tag | Source |
|---|
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|---|---|
| https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html | 2023-05-15 |
Affected Vendors, Products, and Versions
| Vendor | Product | Version | Other | Status | ||||||
|---|---|---|---|---|---|---|---|---|---|---|
| Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
| Sap Search vendor "Sap" | Customer Relationship Management S4fnd Search vendor "Sap" for product "Customer Relationship Management S4fnd" | 102 Search vendor "Sap" for product "Customer Relationship Management S4fnd" and version "102" | - |
Affected
| ||||||
| Sap Search vendor "Sap" | Customer Relationship Management S4fnd Search vendor "Sap" for product "Customer Relationship Management S4fnd" | 103 Search vendor "Sap" for product "Customer Relationship Management S4fnd" and version "103" | - |
Affected
| ||||||
| Sap Search vendor "Sap" | Customer Relationship Management S4fnd Search vendor "Sap" for product "Customer Relationship Management S4fnd" | 104 Search vendor "Sap" for product "Customer Relationship Management S4fnd" and version "104" | - |
Affected
| ||||||
| Sap Search vendor "Sap" | Customer Relationship Management S4fnd Search vendor "Sap" for product "Customer Relationship Management S4fnd" | 105 Search vendor "Sap" for product "Customer Relationship Management S4fnd" and version "105" | - |
Affected
| ||||||
| Sap Search vendor "Sap" | Customer Relationship Management S4fnd Search vendor "Sap" for product "Customer Relationship Management S4fnd" | 106 Search vendor "Sap" for product "Customer Relationship Management S4fnd" and version "106" | - |
Affected
| ||||||
| Sap Search vendor "Sap" | Customer Relationship Management S4fnd Search vendor "Sap" for product "Customer Relationship Management S4fnd" | 107 Search vendor "Sap" for product "Customer Relationship Management S4fnd" and version "107" | - |
Affected
| ||||||
| Sap Search vendor "Sap" | Customer Relationship Management Webclient Ui Search vendor "Sap" for product "Customer Relationship Management Webclient Ui" | 700 Search vendor "Sap" for product "Customer Relationship Management Webclient Ui" and version "700" | - |
Affected
| ||||||
| Sap Search vendor "Sap" | Customer Relationship Management Webclient Ui Search vendor "Sap" for product "Customer Relationship Management Webclient Ui" | 701 Search vendor "Sap" for product "Customer Relationship Management Webclient Ui" and version "701" | - |
Affected
| ||||||
| Sap Search vendor "Sap" | Customer Relationship Management Webclient Ui Search vendor "Sap" for product "Customer Relationship Management Webclient Ui" | 731 Search vendor "Sap" for product "Customer Relationship Management Webclient Ui" and version "731" | - |
Affected
| ||||||
| Sap Search vendor "Sap" | Customer Relationship Management Webclient Ui Search vendor "Sap" for product "Customer Relationship Management Webclient Ui" | 746 Search vendor "Sap" for product "Customer Relationship Management Webclient Ui" and version "746" | - |
Affected
| ||||||
| Sap Search vendor "Sap" | Customer Relationship Management Webclient Ui Search vendor "Sap" for product "Customer Relationship Management Webclient Ui" | 747 Search vendor "Sap" for product "Customer Relationship Management Webclient Ui" and version "747" | - |
Affected
| ||||||
| Sap Search vendor "Sap" | Customer Relationship Management Webclient Ui Search vendor "Sap" for product "Customer Relationship Management Webclient Ui" | 748 Search vendor "Sap" for product "Customer Relationship Management Webclient Ui" and version "748" | - |
Affected
| ||||||
| Sap Search vendor "Sap" | Customer Relationship Management Webclient Ui Search vendor "Sap" for product "Customer Relationship Management Webclient Ui" | 800 Search vendor "Sap" for product "Customer Relationship Management Webclient Ui" and version "800" | - |
Affected
| ||||||
| Sap Search vendor "Sap" | Customer Relationship Management Webclient Ui Search vendor "Sap" for product "Customer Relationship Management Webclient Ui" | 801 Search vendor "Sap" for product "Customer Relationship Management Webclient Ui" and version "801" | - |
Affected
| ||||||