CVE-2019-0244

State: Published
Severity: Not scored
Published: Jan 8, 2019
Updated: Aug 4, 2024
Reserved: Nov 26, 2018

Description

SAP CRM WebClient UI (fixed in SAPSCORE 1.12; S4FND 1.02; WEBCUIF 7.31, 7.46, 7.47, 7.48, 8.0, 8.01) does not sufficiently encode user-controlled inputs, resulting in Cross-Site Scripting (XSS) vulnerability.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
SAP CRM WebClient UI (SAPSCORE)SAP SE	< 1.12Affected
SAP CRM WebClient UI (S4FND)SAP SE	< 1.02Affected
SAP CRM WebClient UI (WEBCUIF)SAP SE	< 7.31Affected < 7.46Affected < 7.47Affected < 7.48Affected < 8.0Affected < 8.01Affected

References

https://launchpad.support.sap.com/#/notes/2588763
106473vdb-entry
https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=509151985

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.