← All advisories

High severity8.8NVD Advisory· Published Oct 16, 2017· Updated Jun 17, 2026

CVE-2017-15296

CVE-2017-15296

Description

The Java component in SAP CRM has CSRF. This is SAP Security Note 2478964.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

9

SAP/Customer Relationship Management8 versions
cpe:2.3:a:sap:customer_relationship_management:700:*:*:*:*:*:*:*+ 7 more
- cpe:2.3:a:sap:customer_relationship_management:700:*:*:*:*:*:*:*
- cpe:2.3:a:sap:customer_relationship_management:701:*:*:*:*:*:*:*
- cpe:2.3:a:sap:customer_relationship_management:702:*:*:*:*:*:*:*
- cpe:2.3:a:sap:customer_relationship_management:730:*:*:*:*:*:*:*
- cpe:2.3:a:sap:customer_relationship_management:731:*:*:*:*:*:*:*
- cpe:2.3:a:sap:customer_relationship_management:732:*:*:*:*:*:*:*
- cpe:2.3:a:sap:customer_relationship_management:733:*:*:*:*:*:*:*
- cpe:2.3:a:sap:customer_relationship_management:754:*:*:*:*:*:*:*
SAP/CRMllm-fuzzy

Patches

Vulnerability mechanics

References

2

blogs.sap.com/2017/07/11/sap-security-patch-day-july-2017/nvdIssue TrackingVendor Advisory
erpscan.io/advisories/erpscan-17-036-csrf-sap-java-crm/nvd

News mentions

0

No linked articles in our index yet.