SAP CRM vulnerabilities

1 known vulnerability in SAP CRM from SAP. None are rated high or critical, and 1 has been exploited in real attacks. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 6.6 Medium severity

  SAP Customer Relationship Management (CRM) Path Traversal Exploited

  CVE-2018-2380Mar 1, 2018SAPEPSS 28.9%

  SAP CRM, 7.01, 7.02,7.30, 7.31, 7.33, 7.54, allows an attacker to exploit insufficient validation of path information provided by users, thus characters representing "traverse to parent directory" are passed through to the file APIs.