CVE-2022-35295
| Reporter | Title | Published | Views | Family All 14 |
|---|---|---|---|---|
 | SAP@ Host Agent Privilege Escalation Vulnerability | 15 Dec 202200:00 | – | zdt |
 | CVE-2022-35295 | 13 Sep 202216:15 | – | attackerkb |
 | CVE-2022-35295 | 13 Sep 202220:25 | – | circl |
 | SAP BusinessObjects Business Intelligence Platform 信息泄露漏洞 | 13 Sep 202200:00 | – | cnnvd |
 | CVE-2022-35295 | 13 Sep 202200:00 | – | cvelist |
 | EUVD-2022-38185 | 3 Oct 202520:07 | – | euvd |
 | Vulnerabilities fixed in SAP products | 14 Sep 202200:00 | – | ncsc |
 | CVE-2022-35295 | 13 Sep 202216:15 | – | nvd |
 | CVE-2022-35295 | 13 Sep 202216:15 | – | osv |
 | SAP@ Host Agent Privilege Escalation | 14 Dec 202200:00 | – | packetstorm |
10
Node
[
{
"vendor": "SAP SE",
"product": "SAP Host Agent (SAPOSCOL)",
"versions": [
{
"version": "7.22",
"status": "affected"
}
]
}
]| Parameter | Position | Path | Description | CWE |
|---|---|---|---|---|
| SaposcolMonAreaLocking.log | path | /usr/sap/tmp/SaposcolMonAreaLocking.log | UNIX symlink following and insecure file permissions in Detailed Lock Logging feature of saposcol | CWE-755 |
| StartLockLog | binary | /usr/sap/hostctrl/exe/saposcol | Starting detailed lock logging creates the log file in /usr/sap/tmp; missing O_EXCL allows symlink-based privilege escalation | CWE-755 |
| StopLockLog | binary | /usr/sap/hostctrl/exe/saposcol | Stopping the lock logging flow; part of the vulnerability chain that can affect log file handling | CWE-755 |
| hwconfig_sapsrv | path | /usr/sap/tmp/hwconfig_sapsrv | UNIX symlink following and race condition in hardware reporting feature | CWE-755 |
| -function GetSAPOSColHWConf | binary | /usr/sap/hostctrl/exe/saphostctrl | GetSAPOSColHWConf path can be exploited via symlinks/race conditions to affect generated hardware report files | CWE-755 |
| SOAP endpoint via loopback (GetSAPOSColHWConf) | path | localhost:1128 | SOAP interface on localhost:1128/1129 used to trigger hardware report generation; potential path/race condition exposure | CWE-755 |
| ossyslog_<host> | path | /usr/sap/tmp/ossyslog_<host> | UNIX symlink following and race condition in system log feature | CWE-755 |
| dev_coll | path | /usr/sap/tmp/dev_coll | UNIX symlink following in log file creation of saposcol | CWE-755 |
| dev_coll.tmp | path | /usr/sap/tmp/dev_coll.tmp | UNIX symlink following in log file creation (temporary log file) | CWE-755 |
| coll.put | path | /usr/sap/tmp/coll.put | UNIX symlink following in shared memory dump file creation | CWE-755 |
Data
Build on a solid foundation with Vulners data
We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data
Api
Power your application with Vulners API
The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access
App
Assess and manage vulnerabilities with Vulners tools
Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation
17 Jun 2026 04:51Current
5.3Medium risk
Vulners AI Score5.3
CVSS 3.14.9
EPSS0.0169