VYPR
← All advisories
Unrated severityNVD Advisory· Published Apr 11, 2023· Updated Feb 7, 2025

HTTP Verb Tampering vulnerability in SAP CRM (WebClient UI)

CVE-2023-29189

Description

SAP CRM (WebClient UI) - versions S4FND 102, 103, 104, 105, 106, 107, WEBCUIF, 700, 701, 731, 730, 746, 747, 748, 800, 801, allows an authenticated attacker to modify HTTP verbs used in requests to the web server. This application is exposed over the network and successful exploitation can lead to exposure of form fields

Affected products

2
  • SAP/CRM WebClient UIllm-fuzzy2 versions
    S4FND 102-107, WEBCUIF, 700, 701, 731, 730, 746, 747, 748, 800, 801+ 1 more
    • (no CPE)range: S4FND 102-107, WEBCUIF, 700, 701, 731, 730, 746, 747, 748, 800, 801
    • (no CPE)range: S4FND 102

Patches

0

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

2

News mentions

0

No linked articles in our index yet.