Not a U.S. government website. NDD is an independent vulnerability database by Volerion and is not affiliated with or endorsed by NIST or NVD.

CVE-2022-35295 Details

In SAP Host Agent (SAPOSCOL) - version 7.22, an attacker may use files created by saposcol to escalate privileges for themselves.

CVSS 3.x Severity and Vector Strings:

NIST: [email protected]CVSS-B:4.9 MEDIUMVector:CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N

By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.

URL	Source(s)	Tag(s)
http://packetstormsecurity.com/files/170233/SAP-Host-Agent-Privilege-Escalation.html	CVE	ExploitThird Party AdvisoryVDB Entry
http://seclists.org/fulldisclosure/2022/Dec/12	CVE	ExploitMailing ListThird Party Advisory
https://launchpad.support.sap.com/#/notes/3159736	CVE	Permissions RequiredVendor Advisory
https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html	CVE	Vendor Advisory
http://packetstormsecurity.com/files/170233/SAP-Host-Agent-Privilege-Escalation.html	[email protected]	ExploitThird Party AdvisoryVDB Entry
http://seclists.org/fulldisclosure/2022/Dec/12	[email protected]	ExploitMailing ListThird Party Advisory
https://launchpad.support.sap.com/#/notes/3159736	[email protected]	Permissions RequiredVendor Advisory
https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html	[email protected]	Vendor Advisory

CWE-ID	CWE Name	Source
CWE-755	Improper Handling of Exceptional Conditions	[email protected]
CWE-755	Improper Handling of Exceptional Conditions	[email protected]

Product	Versions
sap host agent	7.22
CPE cpe:2.3:a:sap:host_agent:7.22:::::::* Remediation No remediation found in references.

10 change records found show changes

QUICK INFO