Back to CVE Browser

CVE-2014-8669

CRITICAL

10.0

CVSS Severity Score

EPSS Score0.1240%

EPSS Percentile36.00th

PublishedNov 6, 2014

Last ModifiedMay 6, 2026

Vulnerability Description

The SAP Promotion Guidelines (CRM-MKT-MPL-TPM-PPG) module for SAP CRM allows remote attackers to execute arbitrary code via unspecified vectors.

Affected Platforms (CPE)

📦

Sap

Customer Relationship Management

All versions

References & Advisories

🔗 http://blog.onapsis.com/analyzing-sap-security-notes-october-2014-edition/

🔗 http://service.sap.com/sap/support/notes/0001835691

🔗 http://service.sap.com/sap/support/notes/0001872638

🔗 http://blog.onapsis.com/analyzing-sap-security-notes-october-2014-edition/

🔗 http://service.sap.com/sap/support/notes/0001835691

🔗 http://service.sap.com/sap/support/notes/0001872638

Related Vulnerabilities

CVE-2013-709510.0

The XML parser (crm_flex_data) in SAP Customer Relationship Management (CRM) 7.02 EHP 2 has unknown impact and attack vectors rela...

CVE-2021-431309.8

An SQL Injection vulnerability exists in Sourcecodester Customer Relationship Management System (CRM) 1.0 via the username paramet...

CVE-2021-372218.8

A file upload vulnerability exists in Sourcecodester Customer Relationship Management System 1.0 via the account update option & c...

CVE-2005-40877.5

PHP remote file include vulnerability in acceptDecline.php in Sugar Suite Open Source Customer Relationship Management (SugarCRM) ...