SAP Customer Relationship Management (CRM) Path Traversal Vulnerability. Actively exploited: CISA added this vulnerability to its Known Exploited Vulnerabilities catalog on 03/11/2021. Patch affected systems as an emergency. It is known to be used in ransomware campaigns.
| Package | Affected versions | Patched versions |
|---|---|---|
| customer relationship management | = 7.01= 7.02= 7.30= 7.31= 7.33= 7.54 |
SAP CRM, 7.01, 7.02,7.30, 7.31, 7.33, 7.54, allows an attacker to exploit insufficient validation of path information provided by users, thus characters representing "traverse to parent directory" are passed through to the file APIs.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free