CVE-2026-44768 – Security misconfiguration in SAP CRM (WebClient UI)

CVE ID :CVE-2026-44768

Published : July 14, 2026, 1:16 a.m. | 14 minutes ago

Description :SAP CRM WebClient UI allows an attacker to inject and execute malicious scripts in the context of the application due to the absence of a Content Security Policy (CSP) configuration for certain restrictive directives. This vulnerability has a low impact on the integrity of the application. Confidentiality and availability are not impacted.

Severity: 4.1 | MEDIUM

Visit the link for more details, such as CVSS details, affected products, timeline, and more…