CVE:CVE-2023-29188
CNNVD:CNNVD-202305-614
SAP CRM是德国思爱普（SAP）公司的一个客户关系管理系统。
SAP CRM WebClient UI存在跨站脚本漏洞，该漏洞源于没有对用户控制的输入进行充分编码。攻击者利用该漏洞可以读取和修改一些敏感信息，但无法删除数据。以下版本受到影响：SAPSCORE 129、S4FND 102、S4FND 103、S4FND 104、S4FND 105、S4FND 106、S4FND 107、WEBCUIF 701、WEBCUIF 731、WEBCUIF 746、WEBCUIF 747、WEBCUIF 748、WEBCUIF 800、WEBCUIF 801。
solution:Upgrade sap customer_relationship_management_webclient_ui to a higher version than 7.01,7.31,7.46,7.47,7.48,8.00,8.01,and avoid the version 7.01,7.31,7.46,7.47,7.48,8.00,8.01; Upgrade sap s4fnd to a higher version than 1.02,102,103,104,105,106,107,and avoid the version 1.02,102,103,104,105,106,107; Upgrade sap sapscore to a higher version than 129,and avoid the version 129