CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Showing 1โ1 of 1 advisories (Page 1/1)
2018-03-01
SAP CRM Directory Traversal and Remote Code Execution Vulnerability (CVE-2018-2380) Analysis & Mitigation Guide
[Affected Scope] SAP CRM versions 7.01, 7.02, 7.30, 7.31, 7.33, and 7.54
[Impact] Attackers can bypass path validation using directory traversal sequences to upload malicious JSP files, leading to arbitrary Remote Code Execution (RCE)
[Mitigation] Apply SAP Security Note 2547431 immediately and implement WAF rules to block directory traversal patterns (../)