CVE-2018-2380 SAP Customer Relationship Management (CRM)
SAP Customer Relationship Management (CRM) contains a path traversal vulnerability that allows an attacker to exploit insufficient validation of path information provided by users.
- CVSS
- not scored
On CISA’s exploited list
SAP Customer Relationship Management (CRM) Path Traversal Vulnerability
- Added
- 2021-11-03
- Federal patch deadline
- 2022-05-03
- Ransomware use
- known