deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2021-39804
Published: 2022-04-12
Description: In reinit of HeifDecoderImpl.cpp, there is a possible crash due to a missing null check. This could lead to remote persistent denial of service in the file picker with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-11 Android-12 Android-12LAndroid ID: A-215002587
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-476
References: https://source.android.com/security/bulletin/2022-04-01; https://source.android.com/security/bulletin/2022-04-01
CVE: CVE-2021-39805
Published: 2022-04-12
Description: In l2cble_process_sig_cmd of l2c_ble.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure through Bluetooth with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-12 Android-12LAndroid ID: A-212694559
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-125
References: https://source.android.com/security/bulletin/2022-04-01; https://source.android.com/security/bulletin/2022-04-01
CVE: CVE-2021-39807
Published: 2022-04-12
Description: In handleNfcStateChanged of SecureNfcEnabler.java, there is a possible way to enable NFC from the Guest account due to a missing permission check. This could lead to local escalation of privilege from the Guest account with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10 Android-11 Android-12 Android-12LAndroid ID: A-209446496
CVSS Score: 7.8 (HIGH)
CWE: CWE-269
References: https://source.android.com/security/bulletin/2022-04-01; https://source.android.com/security/bulletin/2022-04-01
CVE: CVE-2021-39808
Published: 2022-04-12
Description: In createNotificationChannelGroup of PreferencesHelper.java, there is a possible way for a service to run in foreground without user notification due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10 Android-11 Android-12Android ID: A-209966086
CVSS Score: 7.8 (HIGH)
CWE: CWE-862
References: https://source.android.com/security/bulletin/2022-04-01; https://source.android.com/security/bulletin/2022-04-01
CVE: CVE-2021-39809
Published: 2022-04-12
Description: In avrc_ctrl_pars_vendor_rsp of avrc_pars_ct.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10 Android-11 Android-12 Android-12LAndroid ID: A-205837191
CVSS Score: 7.5 (HIGH)
CWE: CWE-125
References: https://source.android.com/security/bulletin/2022-04-01; https://source.android.com/security/bulletin/2022-04-01
CVE: CVE-2021-39812
Published: 2022-04-12
Description: In TBD of TBD, there is a possible out of bounds read due to a use after free. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-205522359References: N/A
CVSS Score: 7.8 (HIGH)
CWE: CWE-416
References: https://source.android.com/security/bulletin/pixel/2022-04-01; https://source.android.com/security/bulletin/pixel/2022-04-01
CVE: CVE-2021-39814
Published: 2022-04-12
Description: In ppmp_validate_wsm of drm_fw.c, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-216792660References: N/A
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-787
References: https://source.android.com/security/bulletin/pixel/2022-04-01; https://source.android.com/security/bulletin/pixel/2022-04-01
CVE: CVE-2021-41004
Published: 2022-04-12
Description: A remote vulnerability was discovered in Aruba Instant On 1930 Switch Series version(s): Firmware below v1.0.7.0.
CVSS Score: 7.5 (HIGH)
References: https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbnw04270en_us; https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbnw04270en_us
CVE: CVE-2021-41005
Published: 2022-04-12
Description: A remote vulnerability was discovered in Aruba Instant On 1930 Switch Series version(s): Firmware below v1.0.7.0.
CVSS Score: 6.5 (MEDIUM)
References: https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbnw04270en_us; https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbnw04270en_us
CVE: CVE-2022-21155
Published: 2022-04-12
Description: A specially crafted packet sent to the Fernhill SCADA Server Version 3.77 and earlier may cause an exception, causing the server process (FHSvrService.exe) to exit.
CVSS Score: 7.5 (HIGH)
CWE: CWE-400, CWE-755
References: https://www.cisa.gov/uscert/ics/advisories/icsa-22-006-02; https://www.cisa.gov/uscert/ics/advisories/icsa-22-006-02
CVE: CVE-2022-21168
Published: 2022-04-12
Description: The affected product is vulnerable due to an invalid pointer initialization, which may lead to information disclosure.
CVSS Score: 3.3 (LOW)
CWE: CWE-824
References: https://www.cisa.gov/uscert/ics/advisories/icsa-22-090-03; https://www.cisa.gov/uscert/ics/advisories/icsa-22-090-03
CVE: CVE-2022-21202
Published: 2022-04-12
Description: The affected product is vulnerable to an out-of-bounds read, which may result in disclosure of sensitive information.
CVSS Score: 3.3 (LOW)
CWE: CWE-125
References: https://www.cisa.gov/uscert/ics/advisories/icsa-22-090-03; https://www.cisa.gov/uscert/ics/advisories/icsa-22-090-03
CVE: CVE-2022-21214
Published: 2022-04-12
Description: The affected product is vulnerable to a heap-based buffer overflow, which may lead to code execution.
CVSS Score: 7.8 (HIGH)
CWE: CWE-122
References: https://www.cisa.gov/uscert/ics/advisories/icsa-22-090-03; https://www.cisa.gov/uscert/ics/advisories/icsa-22-090-03
CVE: CVE-2022-21228
Published: 2022-04-12
Description: The affected product is vulnerable to a stack-based buffer overflow, which may allow an attacker to execute arbitrary code.
CVSS Score: 7.8 (HIGH)
CWE: CWE-121, CWE-787
References: https://www.cisa.gov/uscert/ics/advisories/icsa-22-090-03; https://www.cisa.gov/uscert/ics/advisories/icsa-22-090-03
CVE: CVE-2022-22541
Published: 2022-04-12
Description: SAP BusinessObjects Business Intelligence Platform - versions 420, 430, may allow legitimate users to access information they shouldn't see through relational or OLAP connections. The main impact is the disclosure of company data to people that shouldn't or don't need to have access.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-213
References: https://launchpad.support.sap.com/#/notes/3137191; https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html; https://launchpad.support.sap.com/#/notes/3137191
CVE: CVE-2022-23702
Published: 2022-04-12
Description: A potential security vulnerability has been identified in HPE Superdome Flex and Superdome Flex 280 Servers. The vulnerability could be locally exploited to allow an user with Administrator access to escalate their privilege. The vulnerability is resolved in the latest firmware update. HPE Superdome Flex Server Version 3.50.58 or later, HPE Superdome Flex 280 Server Version 1.20.204 or later.
CVSS Score: 6.7 (MEDIUM)
References: https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf04266en_us; https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf04266en_us
CVE: CVE-2022-23703
Published: 2022-04-12
Description: A security vulnerability has been identified in HPE Nimble Storage Hybrid Flash Arrays, HPE Nimble Storage All Flash Arrays and HPE Nimble Storage Secondary Flash Arrays during update. This would potentially allow an attacker to intercept and modify network communication for software updates initiated by the Nimble appliance. The following NimbleOS versions, and all subsequent releases, contain a software fix for this vulnerability: 5.0.10.100, 5.2.1.500, 6.0.0.100
CVSS Score: 7.5 (HIGH)
References: https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbst04268en_us; https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbst04268en_us
CVE: CVE-2022-24383
Published: 2022-04-12
Description: The affected product is vulnerable to an out-of-bounds read, which may result in code execution
CVSS Score: 7.8 (HIGH)
CWE: CWE-125
References: https://www.cisa.gov/uscert/ics/advisories/icsa-22-090-03; https://www.cisa.gov/uscert/ics/advisories/icsa-22-090-03
CVE: CVE-2022-24812
Published: 2022-04-12
Description: Grafana is an open-source platform for monitoring and observability. When fine-grained access control is enabled and a client uses Grafana API Key to make requests, the permissions for that API Key are cached for 30 seconds for the given organization. Because of the way the cache ID is constructed, the consequent requests with any API Key evaluate to the same permissions as the previous requests. This can lead to an escalation of privileges, when for example a first request is made with Admin permissions, and the second request with different API Key is made with Viewer permissions, the second request will get the cached permissions from the previous Admin, essentially accessing higher privilege than it should. The vulnerability is only impacting Grafana Enterprise when the fine-grained access control beta feature is enabled and there are more than one API Keys in one organization with different roles assigned. All installations after Grafana Enterprise v8.1.0-beta1 should be upgraded as soon as possible. As an alternative, disable fine-grained access control will mitigate the vulnerability.
CVSS Score: 8.0 (HIGH)
CWE: CWE-269
References: https://github.com/grafana/grafana/security/advisories/GHSA-82gq-xfg3-5j7v; https://grafana.com/blog/2022/04/12/grafana-enterprise-8.4.6-released-with-high-severity-security-fix/; https://grafana.com/docs/grafana/latest/release-notes/release-notes-8-4-6/
CVE: CVE-2022-26105
Published: 2022-04-12
Description: SAP NetWeaver Enterprise Portal - versions 7.10, 7.11, 7.20, 7.30, 7.31, 7.40, 7.50, is susceptible to script execution attack by an unauthenticated attacker due to improper sanitization of the user inputs while interacting on the Network. On successful exploitation, an attacker can view or modify information causing a limited impact on confidentiality and integrity of the application.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://launchpad.support.sap.com/#/notes/3163583; https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html; https://launchpad.support.sap.com/#/notes/3163583
CVE: CVE-2022-26106
Published: 2022-04-12
Description: When a user opens a manipulated Computer Graphics Metafile (.cgm, CgmCore.dll) received from untrusted sources in SAP 3D Visual Enterprise Viewer - version 9.0, the application crashes and becomes temporarily unavailable to the user until restart of the application.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-20
References: https://launchpad.support.sap.com/#/notes/3143437; https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html; https://launchpad.support.sap.com/#/notes/3143437
CVE: CVE-2022-26107
Published: 2022-04-12
Description: When a user opens a manipulated Jupiter Tesselation (.jt, JTReader.x3d) received from untrusted sources in SAP 3D Visual Enterprise Viewer - version 9.0, the application crashes and becomes temporarily unavailable to the user until restart of the application.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-20
References: https://launchpad.support.sap.com/#/notes/3143437; https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html; https://launchpad.support.sap.com/#/notes/3143437
CVE: CVE-2022-26108
Published: 2022-04-12
Description: When a user opens a manipulated Picture Exchange (.pcx, 2d.x3d) received from untrusted sources in SAP 3D Visual Enterprise Viewer - version 9.0, the application crashes and becomes temporarily unavailable to the user until restart of the application.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-20
References: https://launchpad.support.sap.com/#/notes/3143437; https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html; https://launchpad.support.sap.com/#/notes/3143437
CVE: CVE-2022-26109
Published: 2022-04-12
Description: When a user opens a manipulated Portable Document Format (.pdf, PDFView.x3d) received from untrusted sources in SAP 3D Visual Enterprise Viewer - version 9.0, the application crashes and becomes temporarily unavailable to the user until restart of the application.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-20
References: https://launchpad.support.sap.com/#/notes/3143437; https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html; https://launchpad.support.sap.com/#/notes/3143437
CVE: CVE-2022-27139
Published: 2022-04-12
Description: An arbitrary file upload vulnerability in the file upload module of Ghost v4.39.0 allows attackers to execute arbitrary code via a crafted SVG file. NOTE: Vendor states that as outlined in Ghost's security documentation, upload of SVGs is only possible by trusted authenticated users. The uploading of SVG files to Ghost does not represent a remote code execution vulnerability. SVGs are not executable on the server, and may only execute javascript in a client's browser - this is expected and intentional functionality
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-434
References: http://ghost.org/docs/security/#privilege-escalation-attacks; https://youtu.be/FCqWEvir2wE; http://ghost.org/docs/security/#privilege-escalation-attacks
CVE: CVE-2022-27140
Published: 2022-04-12
Description: An arbitrary file upload vulnerability in the file upload module of express-fileupload 1.3.1 allows attackers to execute arbitrary code via a crafted PHP file. NOTE: the vendor's position is that the observed behavior can only occur with "intentional misusing of the API": the express-fileupload middleware is not responsible for an application's business logic (e.g., determining whether or how a file should be renamed).
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-434
References: https://github.com/richardgirges/express-fileupload/issues/312#issuecomment[PII_REDACTED]; https://github.com/richardgirges/express-fileupload/issues/329#issuecomment[PII_REDACTED]; https://www.youtube.com/watch?v=4XpofFi84KI
CVE: CVE-2022-27260
Published: 2022-04-12
Description: An arbitrary file upload vulnerability in the file upload component of ButterCMS v1.2.8 allows attackers to execute arbitrary code via a crafted SVG file.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-434
References: http://buttercms.com; https://github.com/ButterCMS/buttercms-js; https://share.getcloudapp.com/nOuR70WB
CVE: CVE-2022-27261
Published: 2022-04-12
Description: An arbitrary file write vulnerability in Express-FileUpload v1.3.1 allows attackers to upload multiple files with the same name, causing an overwrite of files in the web application server.
CVSS Score: 7.5 (HIGH)
CWE: CWE-434
References: https://www.npmjs.com/package/express-fileupload; https://www.youtube.com/watch?v=3ROHB3ck4tA; https://www.npmjs.com/package/express-fileupload
CVE: CVE-2022-27262
Published: 2022-04-12
Description: An arbitrary file upload vulnerability in the file upload module of Skipper v0.9.1 allows attackers to execute arbitrary code via a crafted file.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-434
References: http://skipper.com; https://www.youtube.com/watch?v=cA7G2kidTF4; http://skipper.com
CVE: CVE-2022-27263
Published: 2022-04-12
Description: An arbitrary file upload vulnerability in the file upload module of Strapi v4.1.5 allows attackers to execute arbitrary code via a crafted file.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-434
References: https://github.com/strapi/strapi; https://www.youtube.com/watch?v=LEeabouqRrg; https://github.com/strapi/strapi
CVE: CVE-2022-27654
Published: 2022-04-12
Description: When a user opens a manipulated Photoshop Document (.psd, 2d.x3d) received from untrusted sources in SAP 3D Visual Enterprise Viewer - version 9.0, the application crashes and becomes temporarily unavailable to the user until restart of the application.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-20
References: https://launchpad.support.sap.com/#/notes/3143437; https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html; https://launchpad.support.sap.com/#/notes/3143437
CVE: CVE-2022-27655
Published: 2022-04-12
Description: When a user opens a manipulated Universal 3D (.u3d, 3difr.x3d) received from untrusted sources in SAP 3D Visual Enterprise Viewer - version 9.0, the application crashes and becomes temporarily unavailable to the user until restart of the application.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-20
References: https://launchpad.support.sap.com/#/notes/3143437; https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html; https://launchpad.support.sap.com/#/notes/3143437
CVE: CVE-2022-27657
Published: 2022-04-12
Description: A highly privileged remote attacker, can gain unauthorized access to display contents of restricted directories by exploiting insufficient validation of path information in SAP Focused Run (Simple Diagnostics Agent 1.0) - version 1.0.
CVSS Score: 2.7 (LOW)
CWE: CWE-22, CWE-22
References: http://packetstormsecurity.com/files/167563/SAP-FRUN-Simple-Diagnostics-Agent-1.0-Directory-Traversal.html; http://seclists.org/fulldisclosure/2022/Jun/41; https://launchpad.support.sap.com/#/notes/3159091
CVE: CVE-2022-27667
Published: 2022-04-12
Description: Under certain conditions, SAP BusinessObjects Business Intelligence platform, Client Management Console (CMC) - version 430, allows an attacker to access information which would otherwise be restricted, leading to Information Disclosure.
CVSS Score: 7.5 (HIGH)
CWE: CWE-200
References: https://launchpad.support.sap.com/#/notes/3145769; https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html; https://launchpad.support.sap.com/#/notes/3145769
CVE: CVE-2022-27669
Published: 2022-04-12
Description: An unauthenticated user can use functions of XML Data Archiving Service of SAP NetWeaver Application Server for Java - version 7.50, to which access should be restricted. This may result in an escalation of privileges.
CVSS Score: 7.5 (HIGH)
CWE: CWE-862
References: https://launchpad.support.sap.com/#/notes/3152442; https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html; https://launchpad.support.sap.com/#/notes/3152442
CVE: CVE-2022-27670
Published: 2022-04-12
Description: SAP SQL Anywhere - version 17.0, allows an authenticated attacker to prevent legitimate users from accessing a SQL Anywhere database server by crashing the server with some queries that use indirect identifiers.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-99
References: https://launchpad.support.sap.com/#/notes/3148094; https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html; https://launchpad.support.sap.com/#/notes/3148094
CVE: CVE-2022-27671
Published: 2022-04-12
Description: A CSRF token visible in the URL may possibly lead to information disclosure vulnerability.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-201
References: https://launchpad.support.sap.com/#/notes/3130497; https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html; https://launchpad.support.sap.com/#/notes/3130497
CVE: CVE-2022-27952
Published: 2022-04-12
Description: An arbitrary file upload vulnerability in the file upload module of PayloadCMS v0.15.0 allows attackers to execute arbitrary code via a crafted SVG file.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-434
References: https://github.com/payloadcms/payload; https://www.youtube.com/watch?v=6CfhAxA3xdQ; https://github.com/payloadcms/payload
CVE: CVE-2022-28213
Published: 2022-04-12
Description: When a user access SOAP Web services in SAP BusinessObjects Business Intelligence Platform - version 420, 430, it does not sufficiently validate the XML document accepted from an untrusted source, which might result in arbitrary files retrieval from the server and in successful exploits of DoS.
CVSS Score: 8.1 (HIGH)
CWE: CWE-112
References: http://packetstormsecurity.com/files/167046/SAP-BusinessObjects-Intelligence-4.3-XML-Injection.html; https://launchpad.support.sap.com/#/notes/3055044; https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html
CVE: CVE-2022-28215
Published: 2022-04-12
Description: SAP NetWeaver ABAP Server and ABAP Platform - versions 740, 750, 787, allows an unauthenticated attacker to redirect users to a malicious site due to insufficient URL validation. This could lead to the user being tricked to disclose personal information.
CVSS Score: 4.7 (MEDIUM)
CWE: CWE-601
References: https://launchpad.support.sap.com/#/notes/3165333; https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html; https://launchpad.support.sap.com/#/notes/3165333
CVE: CVE-2022-28216
Published: 2022-04-12
Description: SAP BusinessObjects Business Intelligence Platform (BI Workspace) - version 420, is susceptible to a Cross-Site Scripting attack by an unauthenticated attacker due to improper sanitization of the user inputs on the network. On successful exploitation, an attacker can access certain reports causing a limited impact on confidentiality of the application data.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://launchpad.support.sap.com/#/notes/3150845; https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html; https://launchpad.support.sap.com/#/notes/3150845
CVE: CVE-2022-28396
Published: 2022-04-12
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none
CVE: CVE-2022-28397
Published: 2022-04-12
Description: An arbitrary file upload vulnerability in the file upload module of Ghost CMS v4.42.0 allows attackers to execute arbitrary code via a crafted file. NOTE: Vendor states as detailed in Ghost's security documentation, files can only be uploaded and published by trusted users, this is intentional
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-434
References: http://ghost.com; https://ghost.org/customers/; https://ghost.org/docs/security/#privilege-escalation-attacks
CVE: CVE-2022-28770
Published: 2022-04-12
Description: Due to insufficient input validation, SAPUI5 library(vbm) - versions 750, 753, 754, 755, 75, allows an unauthenticated attacker to inject a script into the URL and execute code. On successful exploitation, an attacker can view or modify information causing a limited impact on confidentiality and integrity of the application.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://launchpad.support.sap.com/#/notes/3126557; https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html; https://launchpad.support.sap.com/#/notes/3126557
CVE: CVE-2022-28772
Published: 2022-04-12
Description: By overlong input values an attacker may force overwrite of the internal program stack in SAP Web Dispatcher - versions 7.53, 7.77, 7.81, 7.85, 7.86, or Internet Communication Manager - versions KRNL64NUC 7.22, 7.22EXT, 7.49, KRNL64UC 7.22, 7.22EXT, 7.49, 7.53, KERNEL 7.22, 7.49, 7.53, 7.77, 7.81, 7.85, 7.86, which makes these programs unavailable, leading to denial of service.
CVSS Score: 7.5 (HIGH)
CWE: CWE-121, CWE-787
References: https://launchpad.support.sap.com/#/notes/3111311; https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html; https://launchpad.support.sap.com/#/notes/3111311