Skip to content
CVE Ledger
  • Newest CVEsPage
  • Recently added to KEVPage
  • Rising exploitation (EPSS)Page
  • Weekly digestPage
  • StatisticsPage
  • WatchlistPage
  • API docsPage
  • MCP serverPage
  • AboutPage
  • Data sourcesPage
  • Data statusPage
  • ChangelogPage
  • How it's builtPage
  • Support the projectPage

14 results

Back

CVE-2023-29189HTTP Verb Tampering vulnerability in SAP CRM (WebClient UI)

Description

SAP CRM (WebClient UI) - versions S4FND 102, 103, 104, 105, 106, 107, WEBCUIF, 700, 701, 731, 730, 746, 747, 748, 800, 801, allows an authenticated attacker to modify HTTP verbs used in requests to the web server. This application is exposed over the network and successful exploitation can lead to exposure of form fields

Timeline

  1. ID reserved

    By sap

  2. · 8 days later

    Published

  3. · 22 months later

    Record updated

Changes after publication (a new score, a public exploit, EPSS crossing 1, 10 or 50 %, leaving KEV) are kept since November 2026; earlier ones are not known.

Scores

CVSS scores of CVE-2023-29189, by who scored it
Scored byCVSSScoreVector
sapCNA (assigner)3.1Medium5.4CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N
NVDNVD · Modified3.1Medium5.4CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N
EPSS (exploitation in 30 days)
0.44% · top 61% of all CVEs (12 Nov 2026)
CISA SSVC
Exploitation: none · Automatable: no · Technical impact: partial
Loading the EPSS history…

The list uses the assigner's score when there is one, then CISA's, then NVD's: Medium 5.4.

Affected products

  • SAP · CRM (WebClient UI)

    • affected S4FND 102
    • affected S4FND 103
    • affected S4FND 104
    • affected S4FND 105
    • affected S4FND 106
    • affected S4FND 107
    • affected WEBCUIF 700
    • affected WEBCUIF 701
    • affected WEBCUIF 731
    • affected WEBCUIF 730
    • affected WEBCUIF 746
    • affected WEBCUIF 747
    • affected WEBCUIF 748
    • affected WEBCUIF 800
    • affected WEBCUIF 801

References

References2

Sources

The same CVE in the primary databases and aggregators, to check against.

Badge for a README or a ticket

CVE-2023-29189 badge
[![CVE-2023-29189](https://cveledger.app/badge/CVE-2023-29189.svg)](https://cveledger.app/cve/CVE-2023-29189)

Record last updated .