Cross-Site Scripting Vulnerability in SAP CRM WebClient UI
CVE-2019-0245

5.4MEDIUM

Key Information:

Vendor: SAP
Status: SAP Crm Webclient Ui (SAPscore); SAP Crm Webclient Ui (s4fnd); SAP Crm Webclient Ui (webcuif)
Vendor: CVE Published:; 8 January 2019

What is CVE-2019-0245?

The SAP CRM WebClient UI is susceptible to Cross-Site Scripting (XSS) due to improper handling of user-controlled input. This vulnerability allows attackers to inject malicious scripts into web pages viewed by users. If exploited, it could lead to unauthorized actions being performed in the context of the user's session, posing a significant risk to application security. Users and administrators are encouraged to upgrade to the latest SAP versions to protect against such vulnerabilities.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch