CVE search
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
| 01/03/2018 |
| CVE-2017-15296 | ALTO8.8 | The Java component in SAP CRM has CSRF. This is SAP Security Note 2478964. | 16/10/2017 |
| CVE-2017-15294 | MEDIO6.1 | The Java administration console in SAP CRM has XSS. This is SAP Security Note 2478964. | 16/10/2017 |
| CVE-2014-1962 | MEDIO5.0 | Gwsync in SAP CRM 7.02 EHP 2 allows remote attackers to obtain sensitive information via unspecified vectors, related to an XML External Entity (XXE) issue. | 14/02/2014 |
| CVE-2013-7095 | CRITICO10.0 | The XML parser (crm_flex_data) in SAP Customer Relationship Management (CRM) 7.02 EHP 2 has unknown impact and attack vectors related to an XML External Entity (XXE) issue. | 13/12/2013 |