CVE-2017-15296

8.8HIGH

Key Information:

Vendor
SAP
Status
Customer Relationship Management
Vendor
CVE Published:
16 October 2017

Summary

The Java component in SAP CRM has CSRF. This is SAP Security Note 2478964.

References

https://erpscan.io/advisories/erpscan-17-036-csrf-sap-jav...
x_refsource_MISC
https://blogs.sap.com/2017/07/11/sap-security-patch-day-j...
x_refsource_MISC

CVSS V3.1

Score:
8.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.