CVE-2022-27657CWE-22

CVE-2022-27657: vulnerability in SAP Focused Run (Simple Diagnostics Agent)

Published · Updated

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

3Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackepss 2.5%
A highly privileged remote attacker, can gain unauthorized access to display contents of restricted directories by exploiting insufficient validation of path information in SAP Focused Run (Simple Diagnostics Agent 1.0) - version 1.0.
Related CVEs — SAP Focused Run (Simple Diagnostics Agent)

In the same product, most dangerous first.