{"history":[{"alert":0,"cve":"CVE-2018-2380","id":21836,"kind":"epss","observed_at":1794500401,"payload":"{\"date\": \"2026-11-12\", \"epss\": 0.28934, \"percentile\": 0.98183}"},{"alert":0,"cve":"CVE-2018-2380","id":19453,"kind":"epss","observed_at":1794327601,"payload":"{\"date\": \"2026-11-10\", \"epss\": 0.28934, \"percentile\": 0.98172}"},{"alert":0,"cve":"CVE-2018-2380","id":17419,"kind":"epss","observed_at":1794241201,"payload":"{\"date\": \"2026-11-09\", \"epss\": 0.28934, \"percentile\": 0.9817}"},{"alert":0,"cve":"CVE-2018-2380","id":15482,"kind":"epss","observed_at":1794154800,"payload":"{\"date\": \"2026-11-08\", \"epss\": 0.28934, \"percentile\": 0.98169}"},{"alert":0,"cve":"CVE-2018-2380","id":13460,"kind":"epss","observed_at":1794068402,"payload":"{\"date\": \"2026-11-07\", \"epss\": 0.28934, \"percentile\": 0.98168}"},{"alert":1,"cve":"CVE-2018-2380","id":12680,"kind":"cna","observed_at":1794003600,"payload":"{\"containers\": {\"adp\": [{\"providerMetadata\": {\"dateUpdated\": \"2024-08-05T04:14:39.708Z\", \"orgId\": \"af854a3a-2127-422b-91ae-364da2661108\", \"shortName\": \"CVE\"}, \"references\": [{\"tags\": [\"x_refsource_MISC\", \"x_transferred\"], \"url\": \"https://github.com/erpscanteam/CVE-2018-2380\"}, {\"name\": \"44292\", \"tags\": [\"exploit\", \"x_refsource_EXPLOIT-DB\", \"x_transferred\"], \"url\": \"https://www.exploit-db.com/exploits/44292/\"}, {\"tags\": [\"x_refsource_CONFIRM\", \"x_transferred\"], \"url\": \"https://launchpad.support.sap.com/#/notes/2547431\"}, {\"name\": \"103001\", \"tags\": [\"vdb-entry\", \"x_refsource_BID\", \"x_transferred\"], \"url\": \"http://www.securityfocus.com/bid/103001\"}, {\"tags\": [\"x_refsource_CONFIRM\", \"x_transferred\"], \"url\": \"https://blogs.sap.com/2018/02/13/sap-security-patch-day-february-2018/\"}], \"title\": \"CVE Program Container\"}, {\"metrics\": [{\"cvssV3_1\": {\"attackComplexity\": \"LOW\", \"attackVector\": \"NETWORK\", \"availabilityImpact\": \"LOW\", \"baseScore\": 6.6, \"baseSeverity\": \"MEDIUM\", \"confidentialityImpact\": \"LOW\", \"integrityImpact\": \"LOW\", \"privilegesRequired\": \"HIGH\", \"scope\": \"CHANGED\", \"userInteraction\": \"NONE\", \"vectorString\": \"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:L\", \"version\": \"3.1\"}}, {\"other\": {\"content\": {\"id\": \"CVE-2018-2380\", \"options\": [{\"Exploitation\": \"active\"}, {\"Automatable\": \"no\"}, {\"Technical Impact\": \"partial\"}], \"role\": \"CISA Coordinator\", \"timestamp\": \"2025-01-29T20:12:55.158230Z\", \"version\": \"2.0.3\"}, \"type\": \"ssvc\"}}, {\"other\": {\"content\": {\"dateAdded\": \"2021-11-03\", \"reference\": \"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2018-2380\"}, \"type\": \"kev\"}}], \"problemTypes\": [{\"descriptions\": [{\"cweId\": \"CWE-22\", \"description\": \"CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')\", \"lang\": \"en\", \"type\": \"CWE\"}]}], \"providerMetadata\": {\"dateUpdated\": \"2025-10-21T23:45:56.073Z\", \"orgId\": \"134c704f-9b21-4f2e-91b3-4a467353bcc0\", \"shortName\": \"CISA-ADP\"}, \"references\": [{\"tags\": [\"government-resource\"], \"url\": \"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2018-2380\"}], \"timeline\": [{\"lang\": \"en\", \"time\": \"2021-11-03T00:00:00.000Z\", \"value\": \"CVE-2018-2380 added to CISA KEV\"}], \"title\": \"CISA ADP Vulnrichment\"}], \"cna\": {\"affected\": [{\"product\": \"SAP CRM\", \"vendor\": \"SAP SE\", \"versions\": [{\"status\": \"affected\", \"version\": \"7.01\"}, {\"status\": \"affected\", \"version\": \"7.02\"}, {\"status\": \"affected\", \"version\": \"7.30\"}, {\"status\": \"affected\", \"version\": \"7.31\"}, {\"status\": \"affected\", \"version\": \"7.33\"}, {\"status\": \"affected\", \"version\": \"7.54\"}]}], \"datePublic\": \"2018-02-13T00:00:00.000Z\", \"descriptions\": [{\"lang\": \"en\", \"value\": \"SAP CRM, 7.01, 7.02,7.30, 7.31, 7.33, 7.54, allows an attacker to exploit insufficient validation of path information provided by users, thus characters representing \\\"traverse to parent directory\\\" are passed through to the file APIs.\"}], \"problemTypes\": [{\"descriptions\": [{\"description\": \"Directory/Path Traversal\", \"lang\": \"en\", \"type\": \"text\"}]}], \"providerMetadata\": {\"dateUpdated\": \"2018-03-17T09:57:01.000Z\", \"orgId\": \"e4686d1a-f260-4930-ac4c-2f5c992778dd\", \"shortName\": \"sap\"}, \"references\": [{\"tags\": [\"x_refsource_MISC\"], \"url\": \"https://github.com/erpscanteam/CVE-2018-2380\"}, {\"name\": \"44292\", \"tags\": [\"exploit\", \"x_refsource_EXPLOIT-DB\"], \"url\": \"https://www.exploit-db.com/exploits/44292/\"}, {\"tags\": [\"x_refsource_CONFIRM\"], \"url\": \"https://launchpad.support.sap.com/#/notes/2547431\"}, {\"name\": \"103001\", \"tags\": [\"vdb-entry\", \"x_refsource_BID\"], \"url\": \"http://www.securityfocus.com/bid/103001\"}, {\"tags\": [\"x_refsource_CONFIRM\"], \"url\": \"https://blogs.sap.com/2018/02/13/sap-security-patch-day-february-2018/\"}], \"x_legacyV4Record\": {\"CVE_data_meta\": {\"ASSIGNER\": \"cna@sap.com\", \"ID\": \"CVE-2018-2380\", \"STATE\": \"PUBLIC\"}, \"affects\": {\"vendor\": {\"vendor_data\": [{\"product\": {\"product_data\": [{\"product_name\": \"SAP CRM\", \"version\": {\"version_data\": [{\"version_affected\": \"=\", \"version_value\": \"7.01\"}, {\"version_affected\": \"=\", \"version_value\": \"7.02\"}, {\"version_affected\": \"=\", \"version_value\": \"7.30\"}, {\"version_affected\": \"=\", \"version_value\": \"7.31\"}, {\"version_affected\": \"=\", \"version_value\": \"7.33\"}, {\"version_affected\": \"=\", \"version_value\": \"7.54\"}]}}]}, \"vendor_name\": \"SAP SE\"}]}}, \"data_format\": \"MITRE\", \"data_type\": \"CVE\", \"data_version\": \"4.0\", \"description\": {\"description_data\": [{\"lang\": \"eng\", \"value\": \"SAP CRM, 7.01, 7.02,7.30, 7.31, 7.33, 7.54, allows an attacker to exploit insufficient validation of path information provided by users, thus characters representing \\\"traverse to parent directory\\\" are passed through to the file APIs.\"}]}, \"problemtype\": {\"problemtype_data\": [{\"description\": [{\"lang\": \"eng\", \"value\": \"Directory/Path Traversal\"}]}]}, \"references\": {\"reference_data\": [{\"name\": \"https://github.com/erpscanteam/CVE-2018-2380\", \"refsource\": \"MISC\", \"url\": \"https://github.com/erpscanteam/CVE-2018-2380\"}, {\"name\": \"44292\", \"refsource\": \"EXPLOIT-DB\", \"url\": \"https://www.exploit-db.com/exploits/44292/\"}, {\"name\": \"https://launchpad.support.sap.com/#/notes/2547431\", \"refsource\": \"CONFIRM\", \"url\": \"https://launchpad.support.sap.com/#/notes/2547431\"}, {\"name\": \"103001\", \"refsource\": \"BID\", \"url\": \"http://www.securityfocus.com/bid/103001\"}, {\"name\": \"https://blogs.sap.com/2018/02/13/sap-security-patch-day-february-2018/\", \"refsource\": \"CONFIRM\", \"url\": \"https://blogs.sap.com/2018/02/13/sap-security-patch-day-february-2018/\"}]}}}}, \"cveMetadata\": {\"assignerOrgId\": \"e4686d1a-f260-4930-ac4c-2f5c992778dd\", \"assignerShortName\": \"sap\", \"cveId\": \"CVE-2018-2380\", \"datePublished\": \"2018-03-01T17:00:00.000Z\", \"dateReserved\": \"2017-12-15T00:00:00.000Z\", \"dateUpdated\": \"2025-10-21T23:45:56.073Z\", \"state\": \"PUBLISHED\"}, \"dataType\": \"CVE_RECORD\", \"dataVersion\": \"5.1\"}"},{"alert":0,"cve":"CVE-2018-2380","id":11242,"kind":"epss","observed_at":1793982001,"payload":"{\"date\": \"2026-11-06\", \"epss\": 0.28934, \"percentile\": 0.98165}"},{"alert":0,"cve":"CVE-2018-2380","id":8988,"kind":"epss","observed_at":1793895600,"payload":"{\"date\": \"2026-11-05\", \"epss\": 0.28934, \"percentile\": 0.98163}"},{"alert":0,"cve":"CVE-2018-2380","id":6776,"kind":"epss","observed_at":1793809200,"payload":"{\"date\": \"2026-11-04\", \"epss\": 0.28934, \"percentile\": 0.98162}"},{"alert":0,"cve":"CVE-2018-2380","id":4553,"kind":"epss","observed_at":1793722800,"payload":"{\"date\": \"2026-11-03\", \"epss\": 0.28934, \"percentile\": 0.98158}"},{"alert":0,"cve":"CVE-2018-2380","id":2335,"kind":"epss","observed_at":1793665375,"payload":"{\"date\": \"2026-11-02\", \"epss\": 0.28934, \"percentile\": 0.98156}"},{"alert":1,"cve":"CVE-2018-2380","id":1713,"kind":"kev","observed_at":1793665375,"payload":"{\"cveID\": \"CVE-2018-2380\", \"cwes\": [\"CWE-22\"], \"dateAdded\": \"2021-11-03\", \"dueDate\": \"2022-05-03\", \"forensicTriage\": \"No\", \"knownRansomwareCampaignUse\": \"Known\", \"notes\": \"https://nvd.nist.gov/vuln/detail/CVE-2018-2380\", \"product\": \"Customer Relationship Management (CRM)\", \"requiredAction\": \"Apply updates per vendor instructions.\", \"shortDescription\": \"SAP Customer Relationship Management (CRM) contains a path traversal vulnerability that allows an attacker to exploit insufficient validation of path information provided by users.\", \"vendorProject\": \"SAP\", \"vulnerabilityName\": \"SAP Customer Relationship Management (CRM) Path Traversal Vulnerability\"}"}],"record":{"affected":[{"product":"SAP CRM","vendor":"SAP SE","versions":[{"status":"affected","version":"7.01"},{"status":"affected","version":"7.02"},{"status":"affected","version":"7.30"},{"status":"affected","version":"7.31"},{"status":"affected","version":"7.33"},{"status":"affected","version":"7.54"}]}],"cna":{"containers":{"adp":[{"providerMetadata":{"dateUpdated":"2024-08-05T04:14:39.708Z","orgId":"af854a3a-2127-422b-91ae-364da2661108","shortName":"CVE"},"references":[{"tags":["x_refsource_MISC","x_transferred"],"url":"https://github.com/erpscanteam/CVE-2018-2380"},{"name":"44292","tags":["exploit","x_refsource_EXPLOIT-DB","x_transferred"],"url":"https://www.exploit-db.com/exploits/44292/"},{"tags":["x_refsource_CONFIRM","x_transferred"],"url":"https://launchpad.support.sap.com/#/notes/2547431"},{"name":"103001","tags":["vdb-entry","x_refsource_BID","x_transferred"],"url":"http://www.securityfocus.com/bid/103001"},{"tags":["x_refsource_CONFIRM","x_transferred"],"url":"https://blogs.sap.com/2018/02/13/sap-security-patch-day-february-2018/"}],"title":"CVE Program Container"},{"metrics":[{"cvssV3_1":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"LOW","baseScore":6.6,"baseSeverity":"MEDIUM","confidentialityImpact":"LOW","integrityImpact":"LOW","privilegesRequired":"HIGH","scope":"CHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:L","version":"3.1"}},{"other":{"content":{"id":"CVE-2018-2380","options":[{"Exploitation":"active"},{"Automatable":"no"},{"Technical Impact":"partial"}],"role":"CISA Coordinator","timestamp":"2025-01-29T20:12:55.158230Z","version":"2.0.3"},"type":"ssvc"}},{"other":{"content":{"dateAdded":"2021-11-03","reference":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2018-2380"},"type":"kev"}}],"problemTypes":[{"descriptions":[{"cweId":"CWE-22","description":"CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')","lang":"en","type":"CWE"}]}],"providerMetadata":{"dateUpdated":"2025-10-21T23:45:56.073Z","orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP"},"references":[{"tags":["government-resource"],"url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2018-2380"}],"timeline":[{"lang":"en","time":"2021-11-03T00:00:00.000Z","value":"CVE-2018-2380 added to CISA KEV"}],"title":"CISA ADP Vulnrichment"}],"cna":{"affected":[{"product":"SAP CRM","vendor":"SAP SE","versions":[{"status":"affected","version":"7.01"},{"status":"affected","version":"7.02"},{"status":"affected","version":"7.30"},{"status":"affected","version":"7.31"},{"status":"affected","version":"7.33"},{"status":"affected","version":"7.54"}]}],"datePublic":"2018-02-13T00:00:00.000Z","descriptions":[{"lang":"en","value":"SAP CRM, 7.01, 7.02,7.30, 7.31, 7.33, 7.54, allows an attacker to exploit insufficient validation of path information provided by users, thus characters representing \"traverse to parent directory\" are passed through to the file APIs."}],"problemTypes":[{"descriptions":[{"description":"Directory/Path Traversal","lang":"en","type":"text"}]}],"providerMetadata":{"dateUpdated":"2018-03-17T09:57:01.000Z","orgId":"e4686d1a-f260-4930-ac4c-2f5c992778dd","shortName":"sap"},"references":[{"tags":["x_refsource_MISC"],"url":"https://github.com/erpscanteam/CVE-2018-2380"},{"name":"44292","tags":["exploit","x_refsource_EXPLOIT-DB"],"url":"https://www.exploit-db.com/exploits/44292/"},{"tags":["x_refsource_CONFIRM"],"url":"https://launchpad.support.sap.com/#/notes/2547431"},{"name":"103001","tags":["vdb-entry","x_refsource_BID"],"url":"http://www.securityfocus.com/bid/103001"},{"tags":["x_refsource_CONFIRM"],"url":"https://blogs.sap.com/2018/02/13/sap-security-patch-day-february-2018/"}],"x_legacyV4Record":{"CVE_data_meta":{"ASSIGNER":"cna@sap.com","ID":"CVE-2018-2380","STATE":"PUBLIC"},"affects":{"vendor":{"vendor_data":[{"product":{"product_data":[{"product_name":"SAP CRM","version":{"version_data":[{"version_affected":"=","version_value":"7.01"},{"version_affected":"=","version_value":"7.02"},{"version_affected":"=","version_value":"7.30"},{"version_affected":"=","version_value":"7.31"},{"version_affected":"=","version_value":"7.33"},{"version_affected":"=","version_value":"7.54"}]}}]},"vendor_name":"SAP SE"}]}},"data_format":"MITRE","data_type":"CVE","data_version":"4.0","description":{"description_data":[{"lang":"eng","value":"SAP CRM, 7.01, 7.02,7.30, 7.31, 7.33, 7.54, allows an attacker to exploit insufficient validation of path information provided by users, thus characters representing \"traverse to parent directory\" are passed through to the file APIs."}]},"problemtype":{"problemtype_data":[{"description":[{"lang":"eng","value":"Directory/Path Traversal"}]}]},"references":{"reference_data":[{"name":"https://github.com/erpscanteam/CVE-2018-2380","refsource":"MISC","url":"https://github.com/erpscanteam/CVE-2018-2380"},{"name":"44292","refsource":"EXPLOIT-DB","url":"https://www.exploit-db.com/exploits/44292/"},{"name":"https://launchpad.support.sap.com/#/notes/2547431","refsource":"CONFIRM","url":"https://launchpad.support.sap.com/#/notes/2547431"},{"name":"103001","refsource":"BID","url":"http://www.securityfocus.com/bid/103001"},{"name":"https://blogs.sap.com/2018/02/13/sap-security-patch-day-february-2018/","refsource":"CONFIRM","url":"https://blogs.sap.com/2018/02/13/sap-security-patch-day-february-2018/"}]}}}},"cveMetadata":{"assignerOrgId":"e4686d1a-f260-4930-ac4c-2f5c992778dd","assignerShortName":"sap","cveId":"CVE-2018-2380","datePublished":"2018-03-01T17:00:00.000Z","dateReserved":"2017-12-15T00:00:00.000Z","dateUpdated":"2025-10-21T23:45:56.073Z","state":"PUBLISHED"},"dataType":"CVE_RECORD","dataVersion":"5.1"},"cna_checked":1794003600,"cve":"CVE-2018-2380","description":"SAP CRM, 7.01, 7.02,7.30, 7.31, 7.33, 7.54, allows an attacker to exploit insufficient validation of path information provided by users, thus characters representing \"traverse to parent directory\" are passed through to the file APIs.","epss":{"date":"2026-11-12","epss":0.28934,"percentile":0.98183},"epss_checked":1794522003,"first_seen":1793665375,"kev":{"cveID":"CVE-2018-2380","cwes":["CWE-22"],"dateAdded":"2021-11-03","dueDate":"2022-05-03","forensicTriage":"No","knownRansomwareCampaignUse":"Known","notes":"https://nvd.nist.gov/vuln/detail/CVE-2018-2380","product":"Customer Relationship Management (CRM)","requiredAction":"Apply updates per vendor instructions.","shortDescription":"SAP Customer Relationship Management (CRM) contains a path traversal vulnerability that allows an attacker to exploit insufficient validation of path information provided by users.","vendorProject":"SAP","vulnerabilityName":"SAP Customer Relationship Management (CRM) Path Traversal Vulnerability"},"kev_checked":1794522003,"products":"SAP SE SAP CRM","references":["https://github.com/erpscanteam/CVE-2018-2380","https://www.exploit-db.com/exploits/44292/","https://launchpad.support.sap.com/#/notes/2547431","http://www.securityfocus.com/bid/103001","https://blogs.sap.com/2018/02/13/sap-security-patch-day-february-2018/","https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2018-2380"],"score":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"LOW","baseScore":6.6,"baseSeverity":"MEDIUM","confidentialityImpact":"LOW","integrityImpact":"LOW","privilegesRequired":"HIGH","provider":"CISA-ADP","scope":"CHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:L","version":"3.1"},"solutions":"","state":"PUBLISHED","title":"SAP Customer Relationship Management (CRM) Path Traversal Vulnerability","updated_at":1794500401,"workarounds":""},"sources":[]}