CVE search
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
| 01/03/2018 |
| CVE-2017-15296 | 高危8.8 | The Java component in SAP CRM has CSRF. This is SAP Security Note 2478964. | 16/10/2017 |
| CVE-2017-15294 | 中危6.1 | The Java administration console in SAP CRM has XSS. This is SAP Security Note 2478964. | 16/10/2017 |
| CVE-2014-1962 | 中危5.0 | Gwsync in SAP CRM 7.02 EHP 2 allows remote attackers to obtain sensitive information via unspecified vectors, related to an XML External Entity (XXE) issue. | 14/02/2014 |
| CVE-2013-7095 | 严重10.0 | The XML parser (crm_flex_data) in SAP Customer Relationship Management (CRM) 7.02 EHP 2 has unknown impact and attack vectors related to an XML External Entity (XXE) issue. | 13/12/2013 |