Unrated severityNVD Advisory· Published May 12, 2015· Updated Jun 17, 2026

CVE-2015-3980

Description

SQL injection vulnerability in the Business Rules Framework (CRM-BF-BRF) in SAP CRM allows attackers to execute arbitrary SQL commands via unspecified vectors, aka SAP Security Note 2097534.

Affected products

SAP/Customer Relationship Management
cpe:2.3:a:sap:customer_relationship_management:-:*:*:*:*:*:*:*
SAP/CRMllm-fuzzy

Patches

Vulnerability mechanics

References

www.onapsis.com/blog/analyzing-sap-security-notes-april-2015-edition/nvd
www.securityfocus.com/bid/74624nvd
www.securitytracker.com/id/1032309nvd

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000