4.9
CVE-2022-22545
- EPSS 0.82%
- Veröffentlicht 09.02.2022 23:15:19
- Zuletzt bearbeitet 21.11.2024 06:46:59
- Erkennungen
LoginA high privileged user who has access to transaction SM59 can read connection details stored with the destination for http calls in SAP NetWeaver Application Server ABAP and ABAP Platform - versions 700, 701, 702, 710, 711, 730, 731, 740, 750, 751, 752, 753, 754, 755, 756.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
SAP ≫ Netweaver Abap Version 700
SAP ≫ Netweaver Abap Version 701
SAP ≫ Netweaver Abap Version 702
SAP ≫ Netweaver Abap Version 710
SAP ≫ Netweaver Abap Version 711
SAP ≫ Netweaver Abap Version 730
SAP ≫ Netweaver Abap Version 731
SAP ≫ Netweaver Abap Version 740
SAP ≫ Netweaver Abap Version 750
SAP ≫ Netweaver Abap Version 751
SAP ≫ Netweaver Abap Version 752
SAP ≫ Netweaver Abap Version 753
SAP ≫ Netweaver Abap Version 754
SAP ≫ Netweaver Abap Version 755
SAP ≫ Netweaver Abap Version 756
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.82% | 0.527 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| NIST | 4.9 | 1.2 | 3.6 |
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N
|
| NIST | 4 | 8 | 2.9 |
AV:N/AC:L/Au:S/C:P/I:N/A:N
|
CWE-200 Exposure of Sensitive Information to an Unauthorized Actor
The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.
https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html
https://launchpad.support.sap.com/#/notes/3128473