description: SAP CRM WebClient UI 7.01, 7.31, 7.46, 7.47, 7.48, 8.00, 8.01, S4FND 1.02, does not sufficiently validate and/or encode hidden fields, resulting in Cross-Site Scripting (XSS) vulnerability.
problem types: Cross-Site Scripting (XSS)
affected:
{
product: SAP CRM WebClient UI
vendor: SAP SE
versions:
status: affected, version: 7.01
status: affected, version: 7.31
status: affected, version: 7.46
status: affected, version: 7.47
status: affected, version: 7.48
status: affected, version: 8.00
status: affected, version: 8.01
}
{
product: S4FND
vendor: SAP SE
versions:
status: affected, version: 1.02
}
