CVE-2022-27657

2022-04-1216:11:29

CWE-22

sap

www.cve.org

4.2 Medium

AI Score

Confidence

High

0.005 Low

EPSS

Percentile

77.4%

JSON

A highly privileged remote attacker, can gain unauthorized access to display contents of restricted directories by exploiting insufficient validation of path information in SAP Focused Run (Simple Diagnostics Agent 1.0) - version 1.0.

CNA Affected

[
  {
    "product": "SAP Focused Run (Simple Diagnostics Agent)",
    "vendor": "SAP SE",
    "versions": [
      {
        "status": "affected",
        "version": "1.0"
      }
    ]
  }
]