CVE-2015-3979: SAP Customer Relationship Management

High severity, CVSS 7.5. EPSS: 2.4% chance of exploitation in the next 30 days.

Unspecified vulnerability in the Business Rules Framework (CRM-BF-BRF) in SAP CRM allows attackers to execute arbitrary code via unknown vectors, aka SAP Security Note 2097534.

Affected products

• SAP Customer Relationship Management: affected versions not specified

Published 2015-05-12. Last modified 2026-06-17.