The Java component in SAP CRM has CSRF. This is SAP Security Note 2478964.Referenceshttps://erpscan.io/advisories/erpscan-17-036-csrf-sap-java-crm/https://blogs.sap.com/2017/07/11/sap-security-patch-day-july-2017/