CISA known exploited vulnerability

CVE-2018-2380

SAP Customer Relationship Management (CRM) Path Traversal Vulnerability

SOURCE FACT

SAP · Customer Relationship Management (CRM)

SAP Customer Relationship Management (CRM) contains a path traversal vulnerability that allows an attacker to exploit insufficient validation of path information provided by users.

Required action

Apply updates per vendor instructions.

CISA notes

https://nvd.nist.gov/vuln/detail/CVE-2018-2380

View source evidence →

CHECK YOUR OUTSIDE-IN INVENTORY

CVE-2018-2380

SAP · Customer Relationship Management (CRM)

Required action

CISA notes

Could this product be present?