CVE search
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
| 01/03/2018 |
| CVE-2017-15296 | 높음8.8 | The Java component in SAP CRM has CSRF. This is SAP Security Note 2478964. | 16/10/2017 |
| CVE-2017-15294 | 보통6.1 | The Java administration console in SAP CRM has XSS. This is SAP Security Note 2478964. | 16/10/2017 |
| CVE-2014-1962 | 보통5.0 | Gwsync in SAP CRM 7.02 EHP 2 allows remote attackers to obtain sensitive information via unspecified vectors, related to an XML External Entity (XXE) issue. | 14/02/2014 |
| CVE-2013-7095 | 심각10.0 | The XML parser (crm_flex_data) in SAP Customer Relationship Management (CRM) 7.02 EHP 2 has unknown impact and attack vectors related to an XML External Entity (XXE) issue. | 13/12/2013 |