EDB-44292

PoC

SAP NetWeaver AS JAVA CRM - Log injection Remote Command Execution

view exploit source exploit_dbtype remoteauthor erp scan teampublished 2018-03-14catalog exploit_db
01

exploited CVEs (1)

Known CVEs related to this entry.

IDseverity exploitable
CVE-2018-2380USmedium6.6OT criticalKEV
SAP CRM, 7.01, 7.02,7.30, 7.31, 7.33, 7.54, allows an attacker to exploit insufficient validation of path information provided by users, thus characters representing "traverse to p…
scry

Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.

Free scan