Lucene search
+L
Catalog
Vendors
Products
Timeline
Vulnerabilities
Sources
Documentation
Blog
Glossary
FAQ
Brand assets
Assessment
Agents dashboard
Agent Scanning
API Scanning
Assessment API
Alerts
Email notifications
Webhook notifications
Alerts API
SBOM package analysis
API Reference
Settings
Sign in

CVE-2018-2380

🗓️ 01 Mar 2018 17:00:00Reported by sapType 
cve
 cve🔗 web.nvd.nist.gov📰️ 4 Media mentions👁 1127 Views🌐 WEB

SAP CRM CVE-2018-2380, Path Traversal Vulnerabilit

Related
Detection
Affected
Refs
Paths
Social
ReporterTitlePublishedViews
Family
zdt
zdt		SAP NetWeaver AS JAVA CRM - Log injection Remote Command Execution Exploit
16 Mar 201800:00
–zdt
attackerkb
ATTACKERKB		CVE-2018-2380
1 Mar 201800:00
–attackerkb
bdu_fstec
BDU FSTEC		The vulnerability of the SAP Customer Relationship Management (CRM) system regarding customer relationship management, related to incorrect restrictions on the path to the restricted catalog, allows a perpetrator to execute arbitrary commands.
7 Dec 202100:00
–bdu_fstec
circl
Circl		CVE-2018-2380
8 Nov 202108:58
–circl
cisa_kev
CISA KEV Catalog		SAP Customer Relationship Management (CRM) Path Traversal Vulnerability
3 Nov 202100:00
–cisa_kev
cnvd
CNVD		SAP CRM Path Traversal Vulnerability
15 Mar 201800:00
–cnvd
checkpoint_advisories
Check Point Advisories		SAP NetWeaver Remote Code Execution (CVE-2018-2380)
28 Dec 202100:00
–checkpoint_advisories
cvelist
Cvelist		CVE-2018-2380
1 Mar 201817:00
–cvelist
exploitdb
Exploit DB		SAP NetWeaver AS JAVA CRM - Log injection Remote Command Execution
14 Mar 201800:00
–exploitdb
exploitpack
exploitpack		SAP NetWeaver AS JAVA CRM - Log injection Remote Command Execution
14 Mar 201800:00
–exploitpack
Rows per page
[
  {
    "product": "SAP CRM",
    "vendor": "SAP SE",
    "versions": [
      {
        "status": "affected",
        "version": "7.01"
      },
      {
        "status": "affected",
        "version": "7.02"
      },
      {
        "status": "affected",
        "version": "7.30"
      },
      {
        "status": "affected",
        "version": "7.31"
      },
      {
        "status": "affected",
        "version": "7.33"
      },
      {
        "status": "affected",
        "version": "7.54"
      }
    ]
  }
]
ParameterPositionPathDescriptionCWE
login_submitrequest body/b2b/admin/index.jspLogin to SAP portal as part of the exploit chainCWE-22
login_do_redirectrequest body/b2b/admin/index.jspLogin to SAP portal as part of the exploit chainCWE-22
j_saltrequest body/b2b/admin/index.jspLogin to SAP portal as part of the exploit chainCWE-22
j_usernamerequest body/b2b/admin/index.jspLogin to SAP portal as part of the exploit chainCWE-22
j_passwordrequest body/b2b/admin/index.jspLogin to SAP portal as part of the exploit chainCWE-22
uidPasswordLogonrequest body/b2b/admin/index.jspLogin to SAP portal as part of the exploit chainCWE-22
selConfigNamerequest body/b2b/admin/logging.jspChange log destination to enable log file manipulation / RCE via log injectionCWE-22
selSeverityrequest body/b2b/admin/logging.jspChange log destination to enable log file manipulation / RCE via log injectionCWE-22
selDestrequest body/b2b/admin/logging.jspChange log destination to enable log file manipulation / RCE via log injectionCWE-22
selLimitrequest body/b2b/admin/logging.jspChange log destination to enable log file manipulation / RCE via log injectionCWE-22
Rows per page

"The attacks are brute-forcing high-privilege SAP user accounts, as well as exploiting a raft of known bugs: CVE-2020-6287, CVE-2020-6207, CVE-2018-2380, CVE-2016-9563, CVE-2016-3976 and CVE-2010-5326" #infosec #CyberSecurity

CVE-2018-2380 SAP CRM, 7.01, 7.02,7.30, 7.31, 7.33, 7.54, allows an attacker to exploit insufficient validation of path information provided by users, thus characters representing "traverse to parent directory" ar... https://t.co/mabeI2YB2q?amp=1

CVE-2018-2380 SAP CRM, 7.01, 7.02,7.30, 7.31, 7.33, 7.54, allows an attacker to exploit insufficient validation of path information provided by users, thus characters representing "traverse to parent directory" ar... https://t.co/mabeI2YB2q?amp=1

[PDF] ONAPSIS: Active Cyberattacks on Mission-Critical SAP Applications - CVE-2020-6287, CVE-2020-6207, CVE-2018-2380, CVE-2016-9563, CVE-2016-3976 and CVE-2010-5326 https://t.co/XfCxK9iohL?amp=1 #security #threathunting #infosec

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

Book a live demo
17 Jun 2026 01:55Current
6.4Medium risk
Vulners AI Score6.4
CVSS 26.5
CVSS 3.16.6
EPSS0.28934
SSVC
CWE-22In Wild
sapcrmcve-2018-2380path traversalsecurity vulnerabilitynvd
1127