Description
Under certain conditions, an SSRF vulnerability in SAP CRM and SAP S/4HANA (Interaction Center) allows an attacker with low privileges to access restricted information. This flaw enables the attacker to send requests to internal network resources, thereby compromising the application's confidentiality. There is no impact on integrity or availability
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| SAP_SE | SAP CRM and SAP S/4HANA (Interaction Center) | S4CRM 100, 200, 204, 205, 206, S4FND 102, 103, 104, 105, 106, 107, 108, S4CEXT 107, BBPCRM 701, 702, 712, 713, 714, WEBCUIF 701, 731, 746, 747, 748, 800, 801 | — |
Advisories 4
- NCSC-2025-0119 Kwetsbaarheden verholpen in SAP-producten NCSC-NL (Netherlands) · Apr 30, 2025
- WID-SEC-2025-0719 SAP Patchday April 2025: Mehrere Schwachstellen BSI CERT-Bund (WID) · Apr 24, 2025
- NCSC-2025-0076 Kwetsbaarheden verholpen in SAP software NCSC-NL (Netherlands) · Mar 11, 2025
- WID-SEC-2025-0521 SAP Patchday März 2025: Mehrere Schwachstellen BSI CERT-Bund (WID) · Mar 10, 2025