CVE-2018-2380: SAP Customer Relationship Management (CRM) Path Traversal
SAP Customer Relationship Management (CRM) Path Traversal Vulnerability. SAP Customer Relationship Management (CRM) contains a path traversal vulnerability that allows an attacker to exploit insufficient validation of path information provided by users.
- CISA KEV-listed (remediation due 2022-05-03)
- used in ransomware campaigns
- EPSS 48.8% (97.8% percentile)