CVE-2022-29616

Опубликовано: 11 мая 2022

Источник: nvd

CVSS3: 7.5

CVSS2: 5

EPSS Низкий

Описание

SAP Host Agent, SAP NetWeaver and ABAP Platform allow an attacker to leverage logical errors in memory management to cause a memory corruption.

Ссылки

https://launchpad.support.sap.com/#/notes/3145702
Permissions Required
Vendor Advisory
https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html
Vendor Advisory
https://launchpad.support.sap.com/#/notes/3145702
Permissions Required
Vendor Advisory
https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:sap:netweaver_as_abap_kernel:7.22:*:*:*:*:*:*:*

cpe:2.3:a:sap:netweaver_as_abap_kernel:7.49:*:*:*:*:*:*:*

cpe:2.3:a:sap:netweaver_as_abap_kernel:7.53:*:*:*:*:*:*:*

cpe:2.3:a:sap:netweaver_as_abap_kernel:7.77:*:*:*:*:*:*:*

cpe:2.3:a:sap:netweaver_as_abap_kernel:7.81:*:*:*:*:*:*:*

cpe:2.3:a:sap:netweaver_as_abap_kernel:7.85:*:*:*:*:*:*:*

cpe:2.3:a:sap:netweaver_as_abap_kernel:7.86:*:*:*:*:*:*:*

cpe:2.3:a:sap:netweaver_as_abap_kernel:7.87:*:*:*:*:*:*:*

cpe:2.3:a:sap:netweaver_as_abap_kernel:8.04:*:*:*:*:*:*:*

cpe:2.3:a:sap:netweaver_as_abap_krnl64nuc:7.22:*:*:*:*:*:*:*

cpe:2.3:a:sap:netweaver_as_abap_krnl64nuc:7.22ext:*:*:*:*:*:*:*

cpe:2.3:a:sap:netweaver_as_abap_krnl64nuc:7.49:*:*:*:*:*:*:*

cpe:2.3:a:sap:netweaver_as_abap_krnl64uc:7.22:*:*:*:*:*:*:*

cpe:2.3:a:sap:netweaver_as_abap_krnl64uc:7.22ext:*:*:*:*:*:*:*

cpe:2.3:a:sap:netweaver_as_abap_krnl64uc:7.49:*:*:*:*:*:*:*

cpe:2.3:a:sap:netweaver_as_abap_krnl64uc:7.53:*:*:*:*:*:*:*

cpe:2.3:a:sap:netweaver_as_abap_krnl64uc:8.04:*:*:*:*:*:*:*

EPSS

Процентиль: 61%

0.00408

Низкий

7.5 High

CVSS3

5 Medium

CVSS2

Дефекты

CWE-787

Связанные уязвимости

GHSA-rprm-2c9c-h52j