CVE-2022-22535

2022-02-0922:05:21

CWE-862

sap

www.cve.org

6.6 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

28.4%

JSON

SAP ERP HCM Portugal - versions 600, 604, 608, does not perform necessary authorization checks for a report that reads the payroll data of employees in a certain area. Since the affected report only reads the payroll information, the attacker can neither modify any information nor cause availability impacts.

CNA Affected

[
  {
    "product": "SAP ERP HCM (Portugal)",
    "vendor": "SAP SE",
    "versions": [
      {
        "status": "affected",
        "version": "600"
      },
      {
        "status": "affected",
        "version": "604"
      },
      {
        "status": "affected",
        "version": "608"
      }
    ]
  }
]