CVE-2018-2380

KEV · Ransomware

Updated Oct 21, 2025 · PUBLISHED

Description

SAP Customer Relationship Management (CRM) contains a path traversal vulnerability that allows an attacker to exploit insufficient validation of path information provided by users.

Full record on cve.org →

Affected packages

Package	Vendor / Product	Version range	Status
SAP CRM	SAP SE / SAP CRM	7.01	affected
SAP CRM	SAP SE / SAP CRM	7.02	affected
SAP CRM	SAP SE / SAP CRM	7.30	affected
SAP CRM	SAP SE / SAP CRM	7.31	affected
SAP CRM	SAP SE / SAP CRM	7.33	affected
SAP CRM	SAP SE / SAP CRM	7.54	affected