CVE-2022-22528CWE-427

CVE-2022-22528: falha em SAP Adaptive Server Enterprise

Publicada em · Atualizada em

Seguir esta CVE+ Monitorar SAP Adaptive Server Enterprise

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

3Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackepss 0.3%
SAP Adaptive Server Enterprise (ASE) - version 16.0, installation makes an entry in the system PATH environment variable in Windows platform which, under certain conditions, allows a Standard User to execute malicious Windows binaries which may lead to privilege escalation on the local system. The issue is with the ASE installer and does not impact other ASE binaries.
Produtos afetados
SAP SE · SAP Adaptive Server Enterprise
CVEs relacionadas — SAP Adaptive Server Enterprise

No mesmo produto, das mais perigosas para as menos.

CVE-2020-6241HIGHCVE-2020-6241EPSS 1.0%CVE-2020-6259MEDIUMCVE-2020-6259EPSS 0.8%CVE-2020-6250MEDIUMCVE-2020-6250EPSS 0.5%CVE-2019-0402—CVE-2019-0402EPSS 0.4%CVE-2020-6317LOWCVE-2020-6317EPSS 0.4%CVE-2020-6295HIGHCVE-2020-6295EPSS 0.3%