CVE-2018-2380
Known Exploited (CISA KEV)MEDIUM
6.6
CVSS Severity Score
Vulnerability Description
SAP CRM, 7.01, 7.02,7.30, 7.31, 7.33, 7.54, allows an attacker to exploit insufficient validation of path information provided by users, thus characters representing "traverse to parent directory" are passed through to the file APIs.
Affected Platforms (CPE)
📦
Sap
Customer Relationship Management
= 7.01📦
Sap
Customer Relationship Management
= 7.02📦
Sap
Customer Relationship Management
= 7.30📦
Sap
Customer Relationship Management
= 7.31📦
Sap
Customer Relationship Management
= 7.33📦
Sap