Directory traversal in CRM_EDR_UPLOAD_DATA/-DOWNLOAD_DATA, SAP security note 1484712 RedRays Team August 10, 2010
IGS is vulnerable to directory traversal attacks via HTTP, SAP security note 865403 RedRays Team October 8, 2009