Sap Customer_relationship_management
10 CVEs affecting Sap Customer_relationship_management. Latest disclosed: 2023-04-11. Critical: 0, High: 2.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2017-15296 | High | 8.8 | 2017-10-16 | The Java component in SAP CRM has CSRF. This is SAP Security Note 2478964. |
CVE-2021-33676 | High | 7.2 | 2021-07-14 | A missing authority check in SAP CRM, versions - 700, 701, 702, 712, 713, 714, could be leveraged by an attacker with high privileges to compromise confidentia… |
CVE-2018-2380 | Medium | 6.6 | 2018-03-01 | SAP CRM, 7.01, 7.02,7.30, 7.31, 7.33, 7.54, allows an attacker to exploit insufficient validation of path information provided by users, thus characters repres… |
CVE-2017-15294 | Medium | 6.1 | 2017-10-16 | The Java administration console in SAP CRM has XSS. This is SAP Security Note 2478964. |
CVE-2023-27897 | Medium | 6.0 | 2023-04-11 | In SAP CRM - versions 700, 701, 702, 712, 713, an attacker who is authenticated with a non-administrative role and a common remote execution authorization can… |
CVE-2015-3980 | | 2015-05-12 | SQL injection vulnerability in the Business Rules Framework (CRM-BF-BRF) in SAP CRM allows attackers to execute arbitrary SQL commands via unspecified vectors… | |
CVE-2015-3979 | | 2015-05-12 | Unspecified vulnerability in the Business Rules Framework (CRM-BF-BRF) in SAP CRM allows attackers to execute arbitrary code via unknown vectors, aka SAP Secur… | |
CVE-2014-8669 | | 2014-11-06 | The SAP Promotion Guidelines (CRM-MKT-MPL-TPM-PPG) module for SAP CRM allows remote attackers to execute arbitrary code via unspecified vectors. | |
CVE-2014-1962 | | 2014-02-14 | Gwsync in SAP CRM 7.02 EHP 2 allows remote attackers to obtain sensitive information via unspecified vectors, related to an XML External Entity (XXE) issue. | |
CVE-2013-7095 | | 2013-12-13 | The XML parser (crm_flex_data) in SAP Customer Relationship Management (CRM) 7.02 EHP 2 has unknown impact and attack vectors related to an XML External Entity… |