CVE-2018-2380mediumunder attackransomwareCWE-22

CVE-2018-2380: medium-severity vulnerability in SAP CRM

Published · Updated

Follow this CVE+ Monitor SAP CRM+ Monitor SAP Customer Relationship Management

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

70Vexday Risk Score

Prioritize patching. It under exploitation confirmed by CISA and has a public proof of concept.

ssvc Actcvss 6.6epss 29%
from disclosure to weapon13 days
Published on NVDMar 1
1st PoC+13d
CISA KEV+1343d
Action required by CISAfederal deadline: 2022-05-03

Apply updates per vendor instructions.

In short

SAP CRM fails to properly validate file paths entered by users, allowing attackers to access files outside the intended directory by using special characters like '../' to navigate to parent folders.

Technical detail

Path traversal vulnerability in SAP CRM (versions 7.01-7.54) due to insufficient input validation on user-supplied path information. Attackers can inject directory traversal sequences (e.g., '../') that are passed unsanitized to file system APIs, enabling unauthorized access to files outside the intended directory scope. Requires user interaction or valid application access.

Summary generated and translated by AI from the official description.

The full analysis of this CVE is available in Portuguese →

SAP CRM, 7.01, 7.02,7.30, 7.31, 7.33, 7.54, allows an attacker to exploit insufficient validation of path information provided by users, thus characters representing "traverse to parent directory" are passed through to the file APIs.
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:L
Affected products
SAP SE · SAP CRM
⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.
Related CVEs — SAP CRM

In the same product, most dangerous first.

CVE-2021-33676MEDIUMCVE-2021-33676EPSS 0.9%