CVE-2018-2380
KEV · RansomwareSAP Customer Relationship Management (CRM) Path Traversal Vulnerability
View CVE record →- Vendor / Project
- SAP
- Product
- Customer Relationship Management (CRM)
- Date added
- Nov 3, 2021
- Due date
- May 3, 2022
- Known ransomware use
- Known
- CWEs
- CWE-22
Description
SAP Customer Relationship Management (CRM) contains a path traversal vulnerability that allows an attacker to exploit insufficient validation of path information provided by users.
Required action
Apply updates per vendor instructions.