CR
Product
Customer Relationship Management
On CISA KEVExploited in the wildRansomware-linked
10
CVEs
1
On KEV
8.8
Max CVSS
0
New 30D
Severity mix
Critical 0High 2Medium 3Low 0
Watch
Add Customer Relationship Management to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2018-2380 RansomwareIn wildKEV | 6.6 | Mar 1 | SAP Customer Relationship Management (CRM) Path Traversal Vulnerability Affected: 7.01; 7.02; 7.30; 7.31; 7.33; 7.54 |
| CVE-2017-15296 | 8.8 | Oct 16 | The Java component in SAP CRM has CSRF Affected: 700; 701; 702; 730; 731; 732; +2 more |
| CVE-2021-33676 | 7.2 | Jul 14 | A missing authority check in SAP CRM, versions - 700, 701, 702, 712, 713, 714, could be leveraged by an attacker with high privileges to compromise confidentiality, integrity, or… Affected: 700; 701; 702; 712; 713; 714 |
| CVE-2023-27897 | 6.3 | Apr 11 | In SAP CRM - versions 700, 701, 702, 712, 713, an attacker who is authenticated with a non-administrative role and a common remote execution authorization can use a vulnerable… Affected: 700; 701; 702; 712; 713 |
| CVE-2017-15294 | 6.1 | Oct 16 | The Java administration console in SAP CRM has XSS Affected: 700; 701; 702; 730; 731; 732; +2 more |
| CVE-2015-3980 | – | May 12 | SQL injection vulnerability in the Business Rules Framework (CRM-BF-BRF) in SAP CRM allows attackers to execute arbitrary SQL commands via unspecified vectors, aka SAP Security… Affected: All versions, or not specified |
| CVE-2015-3979 | – | May 12 | Unspecified vulnerability in the Business Rules Framework (CRM-BF-BRF) in SAP CRM allows attackers to execute arbitrary code via unknown vectors, aka SAP Security Note 2097534 Affected: All versions, or not specified |
| CVE-2014-8669 | – | Nov 6 | The SAP Promotion Guidelines (CRM-MKT-MPL-TPM-PPG) module for SAP CRM allows remote attackers to execute arbitrary code via unspecified vectors Affected: All versions, or not specified |
| CVE-2014-1962 | – | Feb 14 | Gwsync in SAP CRM 7.02 EHP 2 allows remote attackers to obtain sensitive information via unspecified vectors, related to an XML External Entity (XXE) issue Affected: 7.02 |
| CVE-2013-7095 | – | Dec 13 | The XML parser (crm_flex_data) in SAP Customer Relationship Management (CRM) 7.02 EHP 2 has unknown impact and attack vectors related to an XML External Entity (XXE) issue Affected: 7.02 |
Showing 10