CVE-2022-41205

MEDIUM

SAP GUI - Authenticated Script Execution on Local Network

Title source: manual
STIX 2.1

Description

SAP GUI allows an authenticated attacker to execute scripts in the local network. On successful exploitation, the attacker can gain access to registries which can cause a limited impact on confidentiality and high impact on availability of the application.

References (2)

Core 2

Scores

CVSS v3 5.5
EPSS 0.0016
EPSS Percentile 36.6%
Attack Vector LOCAL
CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:L/I:L/A:H

CISA SSVC

Vulnrichment
Exploitation none
Automatable no
Technical Impact partial

Details

CWE
CWE-94
Status published
Products (1)
sap/gui 7.70
Published Nov 08, 2022
Tracked Since Feb 18, 2026