Known vulnerabilities in SAP CRM
Vendor:
SAP
Software:
SAP CRM
Software CPE:
cpe:2.3:a:sap:sap_crm:*:*:*:*:*:*:*:*
Website:
https://www.sap.com/
Total vulnerabilities:
7
Public exploits:
0
Known exploited (KEV):
0
Highest CVSSv4 Score:
8.7
Breakdown by Severity Chart
Vulnerabilities (7)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU122524 - Improper Control of Generation of Code ('Code Injection') CVE-2026-0488 |
CWE-94 | Medium | - | 10.02.2026 |
SB2026021027 |
||
| #VU107145 - Server-Side Request Forgery (SSRF) CVE-2025-27430 |
CWE-918 | Medium | - | 08.04.2025 |
SB2025040827 |
||
| #VU78683 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2023-30742 |
CWE-79 | Low | - | 26.07.2023 |
SB2023072747 |
||
| #VU78650 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2023-33986 |
CWE-79 | Low | - | 25.07.2023 |
SB2023072747 |
||
| #VU75137 - Improper input validation CVE-2023-29189 |
CWE-20 | Medium | - | 14.04.2023 |
SB2023041448 |
||
| #VU75135 - Improper Control of Generation of Code ('Code Injection') CVE-2023-27897 |
CWE-94 | Medium | - | 14.04.2023 |
SB2023041448 |
||
| #VU10634 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2018-2364 |
CWE-79 | Low | - | 19.02.2018 |
SB2018021337 |