SAP SE SAP CRM vulnerabilities

2 vulnerabilities

Known vulnerabilities in SAP SE SAP CRM, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

6.6CVE-2018-2380sap sesap crm+1KEVRansomware
EPSS score
28.93%
SAP CRM, 7.01, 7.02,7.30, 7.31, 7.33, 7.54, allows an attacker to exploit insufficient validation of path information provided by users, thus characters representing "traverse to parent directory" are passed through to the file APIs.7.2CVE-2021-33676sap sesap crm+1
EPSS score
0.91%
A missing authority check in SAP CRM, versions - 700, 701, 702, 712, 713, 714, could be leveraged by an attacker with high privileges to compromise confidentiality, integrity, or availability of the system.