{"id":"CVE-2018-2380","vendor_project":"SAP","product":"Customer Relationship Management (CRM)","vulnerability_name":"SAP Customer Relationship Management (CRM) Path Traversal Vulnerability","date_added":"2021-11-03","due_date":"2022-05-03","known_ransomware_use":"Known","short_description":"SAP Customer Relationship Management (CRM) contains a path traversal vulnerability that allows an attacker to exploit insufficient validation of path information provided by users.","required_action":"Apply updates per vendor instructions.","cwes":"CWE-22","cvss_version":"3.1","cvss_severity":"MEDIUM","cvss_vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:L","nvd_published":"2018-03-01","nvd_status":"Analyzed","epss":0.28934,"epss_percentile":0.98073,"cvss_score":6.6,"days_published_to_kev":1343,"source":"https://data.cybermax-tools.workers.dev/cve/CVE-2018-2380","by":"CyberMax"}