SAP SE SAP CRM

• CVE-2018-2380 Medium 6.6 Exploited SAP CRM, 7.01, 7.02,7.30, 7.31, 7.33, 7.54, allows an attacker to exploit insufficient validation of path information provided by users, thus characters representing "traverse to parent directory" are 28.9%
• CVE-2021-33676 Medium 6.8 A missing authority check in SAP CRM, versions - 700, 701, 702, 712, 713, 714, could be leveraged by an attacker with high privileges to compromise confidentiality, integrity, or availability of the s 0.9%