deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2022-3900
Published: 2022-12-12
Description: The Cooked Pro WordPress plugin before 1.7.5.7 does not properly validate or sanitize the recipe_args parameter before unserializing it in the cooked_loadmore action, allowing an unauthenticated attacker to trigger a PHP Object injection vulnerability.
CVSS Score: 9.8 (CRITICAL)
References: https://wpscan.com/vulnerability/c969c4bc-82d7-46a0-88ba-e056c0b27de7; https://wpscan.com/vulnerability/c969c4bc-82d7-46a0-88ba-e056c0b27de7
CVE: CVE-2022-3906
Published: 2022-12-12
Description: The Easy Form Builder WordPress plugin before 3.4.0 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup).
CVSS Score: 4.8 (MEDIUM)
References: https://wpscan.com/vulnerability/fee8652d-cd50-4cb0-b94d-2d124f56af1a; https://wpscan.com/vulnerability/fee8652d-cd50-4cb0-b94d-2d124f56af1a
CVE: CVE-2022-3908
Published: 2022-12-12
Description: The Helloprint WordPress plugin before 1.4.7 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting
CVSS Score: 6.1 (MEDIUM)
References: https://wpscan.com/vulnerability/c44802a0-8cbe-4386-9523-3b6cb44c6505; https://wpscan.com/vulnerability/c44802a0-8cbe-4386-9523-3b6cb44c6505
CVE: CVE-2022-3912
Published: 2022-12-12
Description: The User Registration WordPress plugin before 2.2.4.1 does not properly restrict the files to be uploaded via an AJAX action available to both unauthenticated and authenticated users, which could allow unauthenticated users to upload PHP files for example.
CVSS Score: 7.5 (HIGH)
CWE: CWE-434
References: https://wpscan.com/vulnerability/968c677c-1beb-459b-8fd1-7f70bcaa4f74; https://wpscan.com/vulnerability/968c677c-1beb-459b-8fd1-7f70bcaa4f74
CVE: CVE-2022-3915
Published: 2022-12-12
Description: The Dokan WordPress plugin before 3.7.6 does not properly sanitise and escape a parameter before using it in a SQL statement, leading to a SQL injection exploitable by unauthenticated users
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://wpscan.com/vulnerability/fd416d99-1970-418f-81f5-8438490d4479; https://wpscan.com/vulnerability/fd416d99-1970-418f-81f5-8438490d4479
CVE: CVE-2022-3919
Published: 2022-12-12
Description: The Jetpack CRM WordPress plugin before 5.4.3 does not sanitise and escape its settings, allowing high privilege users such as admin to perform cross-Site Scripting attacks even when the unfiltered_html capability is disallowed.
CVSS Score: 4.8 (MEDIUM)
References: https://wpscan.com/vulnerability/fe2f1d52-8421-4b46-b829-6953a0472dcb; https://wpscan.com/vulnerability/fe2f1d52-8421-4b46-b829-6953a0472dcb
CVE: CVE-2022-3921
Published: 2022-12-12
Description: The Listingo WordPress theme before 3.2.7 does not validate files to be uploaded via an AJAX action available to unauthenticated users, which could allow them to upload arbitrary files and lead to RCE
CVSS Score: 9.8 (CRITICAL)
References: https://wpscan.com/vulnerability/e39b59b0-f24f-4de5-a21c-c4de34c3a14f; https://wpscan.com/vulnerability/e39b59b0-f24f-4de5-a21c-c4de34c3a14f
CVE: CVE-2022-3925
Published: 2022-12-12
Description: The buddybadges WordPress plugin through 1.0.0 does not sanitise and escape a parameter before using it in a SQL statement, leading to a SQL injection exploitable by high privilege users
CVSS Score: 7.2 (HIGH)
References: https://bulletin.iese.de/post/buddybadges_1-0-0/; https://wpscan.com/vulnerability/178499a3-97d1-4ab2-abbe-4a9d2ebc85da; https://bulletin.iese.de/post/buddybadges_1-0-0/
CVE: CVE-2022-3930
Published: 2022-12-12
Description: The Directorist WordPress plugin before 7.4.2.2 suffers from an IDOR vulnerability which an attacker can exploit to change the password  of arbitrary users instead of his own.
CVSS Score: 6.5 (MEDIUM)
References: https://wpscan.com/vulnerability/8728d02a-51db-4447-a843-0264b6ceb413; https://wpscan.com/vulnerability/8728d02a-51db-4447-a843-0264b6ceb413
CVE: CVE-2022-3933
Published: 2022-12-12
Description: The Essential Real Estate WordPress plugin before 3.9.6 does not sanitize and escapes some parameters, which could allow users with a role as low as Admin to perform Cross-Site Scripting attacks.
CVSS Score: 5.4 (MEDIUM)
References: https://wpscan.com/vulnerability/6395f3f1-5cdf-4c55-920c-accc0201baf4; https://wpscan.com/vulnerability/6395f3f1-5cdf-4c55-920c-accc0201baf4
CVE: CVE-2022-3934
Published: 2022-12-12
Description: The FlatPM WordPress plugin before 3.0.13 does not sanitise and escape some parameters before outputting them back in pages, leading to Reflected Cross-Site Scripting which could be used against high privilege users such as admin
CVSS Score: 5.4 (MEDIUM)
References: https://wpscan.com/vulnerability/ab68381f-c4b8-4945-a6a5-1d4d6473b73a; https://wpscan.com/vulnerability/ab68381f-c4b8-4945-a6a5-1d4d6473b73a
CVE: CVE-2022-3935
Published: 2022-12-12
Description: The Welcart e-Commerce WordPress plugin before 2.8.4 does not sanitise and escape some parameters, which could allow any authenticated users, such as subscriber to perform Stored Cross-Site Scripting attacks
CVSS Score: 5.4 (MEDIUM)
References: https://wpscan.com/vulnerability/906c5122-dd6d-494b-b66c-4162e234ea05; https://wpscan.com/vulnerability/906c5122-dd6d-494b-b66c-4162e234ea05
CVE: CVE-2022-3946
Published: 2022-12-12
Description: The Welcart e-Commerce WordPress plugin before 2.8.4 does not have authorisation and CSRF in an AJAX action, allowing any logged-in user to create, update and delete shipping methods.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-352, CWE-862
References: https://wpscan.com/vulnerability/b48e4e1d-e682-4b16-81dc-2feee78d7ed0; https://wpscan.com/vulnerability/b48e4e1d-e682-4b16-81dc-2feee78d7ed0
CVE: CVE-2022-3981
Published: 2022-12-12
Description: The Icegram Express WordPress plugin before 5.5.1 does not properly sanitise and escape a parameter before using it in a SQL statement, leading to a SQL injection exploitable by any authenticated users, such as subscriber
CVSS Score: 8.8 (HIGH)
References: https://wpscan.com/vulnerability/78054d08-0227-426c-903d-d146e0919028; https://wpscan.com/vulnerability/78054d08-0227-426c-903d-d146e0919028
CVE: CVE-2022-3982
Published: 2022-12-12
Description: The Booking calendar, Appointment Booking System WordPress plugin before 3.2.2 does not validate uploaded files, which could allow unauthenticated users to upload arbitrary files, such as PHP and achieve RCE
CVSS Score: 9.8 (CRITICAL)
References: https://wpscan.com/vulnerability/4d91f3e1-4de9-46c1-b5ba-cc55b7726867; https://wpscan.com/vulnerability/4d91f3e1-4de9-46c1-b5ba-cc55b7726867
CVE: CVE-2022-3989
Published: 2022-12-12
Description: The Motors WordPress plugin before 1.4.4 does not properly validate uploaded files for dangerous file types (such as .php) in an AJAX action, allowing an attacker to sign up on a victim's WordPress instance, upload a malicious PHP file and attempt to launch a brute-force attack to discover the uploaded payload.
CVSS Score: 8.8 (HIGH)
References: https://wpscan.com/vulnerability/1bd20329-f3a5-466d-81b0-e4ff0ca32091; https://wpscan.com/vulnerability/1bd20329-f3a5-466d-81b0-e4ff0ca32091
CVE: CVE-2022-3999
Published: 2022-12-12
Description: The DPD Baltic Shipping WordPress plugin before 1.2.57 does not have authorisation and CSRF in an AJAX action, which could allow any authenticated users, such as subscriber to delete arbitrary options from the blog, which could make the blog unavailable.
CVSS Score: 8.1 (HIGH)
CWE: CWE-352, CWE-862
References: https://wpscan.com/vulnerability/625ae924-68db-4579-a34f-e6f33aa33643; https://wpscan.com/vulnerability/625ae924-68db-4579-a34f-e6f33aa33643
CVE: CVE-2022-41881
Published: 2022-12-12
Description: Netty project is an event-driven asynchronous network application framework. In versions prior to 4.1.86.Final, a StackOverflowError can be raised when parsing a malformed crafted message due to an infinite recursion. This issue is patched in version 4.1.86.Final. There is no workaround, except using a custom HaProxyMessageDecoder.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-674, CWE-674
References: https://github.com/netty/netty/security/advisories/GHSA-fx2c-96vj-985v; https://lists.debian.org/debian-lts-announce/2023/01/msg00008.html; https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/
CVE: CVE-2022-4000
Published: 2022-12-12
Description: The WooCommerce Shipping WordPress plugin through 1.2.11 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup).
CVSS Score: 4.8 (MEDIUM)
References: https://wpscan.com/vulnerability/5563c030-bd62-4839-98e8-84bc8191e242; https://wpscan.com/vulnerability/5563c030-bd62-4839-98e8-84bc8191e242
CVE: CVE-2022-4004
Published: 2022-12-12
Description: The Donation Button WordPress plugin through 4.0.0 does not properly check for privileges and nonce tokens in its "donation_button_twilio_send_test_sms" AJAX action, which may allow any users with an account on the affected site, like subscribers, to use the plugin's Twilio integration to send SMSes to arbitrary phone numbers.
CVSS Score: 4.3 (MEDIUM)
References: https://wpscan.com/vulnerability/6a3bcfb3-3ede-459d-969f-b7b30dafd098; https://wpscan.com/vulnerability/6a3bcfb3-3ede-459d-969f-b7b30dafd098
CVE: CVE-2022-4005
Published: 2022-12-12
Description: The Donation Button WordPress plugin through 4.0.0 does not sanitize and escapes some parameters, which could allow users with a role as low as Contributor to perform Cross-Site Scripting attacks.
CVSS Score: 5.4 (MEDIUM)
References: https://wpscan.com/vulnerability/61d5c9b8-5c21-4ab5-b31c-e13ca19ea25c; https://wpscan.com/vulnerability/61d5c9b8-5c21-4ab5-b31c-e13ca19ea25c
CVE: CVE-2022-4010
Published: 2022-12-12
Description: The Image Hover Effects WordPress plugin before 5.5 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup).
CVSS Score: 4.8 (MEDIUM)
References: https://wpscan.com/vulnerability/bed8c81c-04c7-412d-9563-ce4eb64b7754; https://wpscan.com/vulnerability/bed8c81c-04c7-412d-9563-ce4eb64b7754
CVE: CVE-2022-4016
Published: 2022-12-12
Description: The Booster for WooCommerce WordPress plugin before 5.6.7, Booster Plus for WooCommerce WordPress plugin before 5.6.6, Booster Elite for WooCommerce WordPress plugin before 1.1.8 does not properly check for CSRF when creating and deleting Customer roles, allowing attackers to make logged admins create and delete arbitrary custom roles via CSRF attacks
CVSS Score: 6.5 (MEDIUM)
References: https://wpscan.com/vulnerability/9b77044c-fd3f-4e6f-a759-dcc3082dcbd6; https://wpscan.com/vulnerability/9b77044c-fd3f-4e6f-a759-dcc3082dcbd6
CVE: CVE-2022-4097
Published: 2022-12-12
Description: The All-In-One Security (AIOS) WordPress plugin before 5.0.8 is susceptible to IP Spoofing attacks, which can lead to bypassed security features (like IP blocks, rate limiting, brute force protection, and more).
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-639
References: https://wpscan.com/vulnerability/15819d33-7497-4f7d-bbb8-b3ab147806c4; https://wpscan.com/vulnerability/15819d33-7497-4f7d-bbb8-b3ab147806c4
CVE: CVE-2022-4311
Published: 2022-12-12
Description: 
An insertion of sensitive information into log file vulnerability exists in PcVue versions 15 through 15.2.2. This
could allow a user with access to the log files to discover connection strings of data sources configured for the
DbConnect, which could include credentials. Successful exploitation of this vulnerability could allow other users
unauthorized access to the underlying data sources.


CVSS Score: 4.7 (MEDIUM)
CWE: CWE-532
References: https://www.pcvuesolutions.com/support/index.php/en/security-bulletin/1165-security-bulletin-2022-6; https://www.pcvuesolutions.com/support/index.php/en/security-bulletin/1165-security-bulletin-2022-6
CVE: CVE-2022-4312
Published: 2022-12-12
Description: 
A cleartext storage of sensitive information vulnerability exists in PcVue versions 8.10 through 15.2.3. This could
allow an unauthorized user with access the email and short messaging service (SMS) accounts configuration files
to discover the associated simple mail transfer protocol (SMTP) account credentials and the SIM card PIN code.
Successful exploitation of this vulnerability could allow an unauthorized user access to the underlying email
account and SIM card.


CVSS Score: 5.5 (MEDIUM)
CWE: CWE-312, CWE-522
References: https://www.pcvuesolutions.com/support/index.php/en/security-bulletin/1171-security-bulletin-2022-7; https://www.pcvuesolutions.com/support/index.php/en/security-bulletin/1171-security-bulletin-2022-7
CVE: CVE-2022-4314
Published: 2022-12-12
Description: Improper Privilege Management in GitHub repository ikus060/rdiffweb prior to 2.5.2.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-269, CWE-269
References: https://github.com/ikus060/rdiffweb/commit/b2df3679564d0daa2856213bb307d3e34bd89a25; https://huntr.dev/bounties/b2dc504d-92ae-4221-a096-12ff223d95a8; https://github.com/ikus060/rdiffweb/commit/b2df3679564d0daa2856213bb307d3e34bd89a25
CVE: CVE-2022-42716
Published: 2022-12-12
Description: An issue was discovered in the Arm Mali GPU Kernel Driver. There is a use-after-free. A non-privileged user can make improper GPU processing operations to gain access to already freed memory. This affects Valhall r29p0 through r40P0.
CVSS Score: 8.8 (HIGH)
CWE: CWE-416, CWE-416
References: http://packetstormsecurity.com/files/170420/Arm-Mali-CSF-KBASE_REG_NO_USER_FREE-Unsafe-Use-Use-After-Free.html; https://developer.arm.com/Arm%20Security%20Center/Mali%20GPU%20Driver%20Vulnerabilities; http://packetstormsecurity.com/files/170420/Arm-Mali-CSF-KBASE_REG_NO_USER_FREE-Unsafe-Use-Use-After-Free.html
CVE: CVE-2022-45275
Published: 2022-12-12
Description: An arbitrary file upload vulnerability in /queuing/admin/ajax.php?action=save_settings of Dynamic Transaction Queuing System v1.0 allows attackers to execute arbitrary code via a crafted PHP file.
CVSS Score: 7.2 (HIGH)
CWE: CWE-434, CWE-434
References: https://github.com/ATKF/bug_report/blob/main/vendors/oretnom23/dynamic-transaction-queuing-system/RCE-1.md; https://github.com/ATKF/bug_report/blob/main/vendors/oretnom23/dynamic-transaction-queuing-system/RCE-1.md
CVE: CVE-2022-46903
Published: 2022-12-12
Description: Insufficient processing of user input in WebSoft HCM 2021.2.3.327 allows an authenticated attacker to inject arbitrary HTML tags into the page processed by the user's browser, including scripts in the JavaScript programming language, which leads to Stored XSS.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://news.websoft.ru/_wt/wiki_base/[PII_REDACTED]410989446; https://news.websoft.ru/_wt/wiki_base/[PII_REDACTED]410989446
CVE: CVE-2022-46904
Published: 2022-12-12
Description: Insufficient processing of user input in WebSoft HCM 2021.2.3.327 allows an authenticated attacker to inject arbitrary HTML tags into the page processed by the user's browser, including scripts in the JavaScript programming language, which leads to Self-XSS.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://news.websoft.ru/_wt/wiki_base/[PII_REDACTED]775323458; https://news.websoft.ru/_wt/wiki_base/[PII_REDACTED]775323458
CVE: CVE-2022-46905
Published: 2022-12-12
Description: Insufficient processing of user input in WebSoft HCM 2021.2.3.327 allows an unauthenticated attacker to inject arbitrary HTML tags into the page processed by the user's browser, including scripts in the JavaScript programming language, which leads to Reflected XSS.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://news.websoft.ru/_wt/wiki_base/[PII_REDACTED]019676262; https://news.websoft.ru/_wt/wiki_base/[PII_REDACTED]019676262
CVE: CVE-2022-46906
Published: 2022-12-12
Description: Insufficient processing of user input in WebSoft HCM 2021.2.3.327 allows an authenticated attacker to inject arbitrary HTML tags into the page processed by the user's browser, including scripts in the JavaScript programming language, which leads to Reflected XSS.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://news.websoft.ru/_wt/wiki_base/[PII_REDACTED]100985308; https://news.websoft.ru/_wt/wiki_base/[PII_REDACTED]100985308
CVE: CVE-2022-0925
Published: 2022-12-12
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none.
CVE: CVE-2022-41261
Published: 2022-12-12
Description: SAP Solution Manager (Diagnostic Agent) - version 7.20, allows an authenticated attacker on Windows system to access a file containing sensitive data which can be used to access a configuration file which contains credentials to access other system files. Successful exploitation can make the attacker access files and systems for which he/she is not authorized.
CVSS Score: 6.0 (MEDIUM)
CWE: CWE-284
References: https://launchpad.support.sap.com/#/notes/3265173; https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html; https://launchpad.support.sap.com/#/notes/3265173
CVE: CVE-2022-41262
Published: 2022-12-12
Description: Due to insufficient input validation, SAP NetWeaver AS Java (HTTP Provider Service) - version 7.50, allows an unauthenticated attacker to inject a script into a web request header. On successful exploitation, an attacker can view or modify information causing a limited impact on the confidentiality and integrity of the application.

CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://launchpad.support.sap.com/#/notes/3262544; https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html; https://launchpad.support.sap.com/#/notes/3262544
CVE: CVE-2022-41263
Published: 2022-12-12
Description: Due to a missing authentication check, SAP Business Objects Business Intelligence Platform (Web Intelligence) - versions 420, 430, allows an authenticated non-administrator attacker to modify the data source information for a document that is otherwise restricted. On successful exploitation, the attacker can modify information causing a limited impact on the integrity of the application.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-352, CWE-352
References: https://launchpad.support.sap.com/#/notes/3249648; https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html; https://launchpad.support.sap.com/#/notes/3249648
CVE: CVE-2022-3931
Published: 2022-12-12
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none.
CVE: CVE-2022-45269
Published: 2022-12-12
Description: A directory traversal vulnerability in the component SCS.Web.Server.SPI/1.0 of Linx Sphere LINX 7.35.ST15 allows attackers to read arbitrary files.
CVSS Score: 7.5 (HIGH)
CWE: CWE-22, CWE-22
References: https://gist.github.com/robotshell/7b97af98c5dc0cacd57e6bfac90019cd; https://gist.github.com/robotshell/7b97af98c5dc0cacd57e6bfac90019cd
CVE: CVE-2021-41943
Published: 2022-12-13
Description: Logrhythm Web Console 7.4.9 allows for HTML tag injection through Contextualize Action -> Create a new Contextualize Action -> Inject your HTML tag in the name field.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://medium.com/%40idema16/how-i-found-a-cve-in-logrhythm-cve-2021-41943-61cef1797cb; https://medium.com/%40idema16/how-i-found-a-cve-in-logrhythm-cve-2021-41943-61cef1797cb
CVE: CVE-2022-41264
Published: 2022-12-13
Description: Due to the unrestricted scope of the RFC function module, SAP BASIS - versions 731, 740, 750, 751, 752, 753, 754, 755, 756, 757, 789, 790, 791, allows an authenticated non-administrator attacker to access a system class and execute any of its public methods with parameters provided by the attacker. On successful exploitation the attacker can have full control of the system to which the class belongs, causing a high impact on the integrity of the application.

CVSS Score: 8.8 (HIGH)
CWE: CWE-94
References: https://launchpad.support.sap.com/#/notes/3268172; https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html; https://launchpad.support.sap.com/#/notes/3268172
CVE: CVE-2022-41266
Published: 2022-12-13
Description: Due to a lack of proper input validation, SAP Commerce Webservices 2.0 (Swagger UI) - versions 1905, 2005, 2105, 2011, 2205, allows malicious inputs from untrusted sources, which can be leveraged by an attacker to execute a DOM Cross-Site Scripting (XSS) attack.  As a result, an attacker may be able to steal user tokens and achieve a full account takeover including access to administrative tools in SAP Commerce.
CVSS Score: 8.0 (HIGH)
CWE: CWE-79
References: https://launchpad.support.sap.com/#/notes/3248255; https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html; https://launchpad.support.sap.com/#/notes/3248255
CVE: CVE-2022-41267
Published: 2022-12-13
Description: SAP Business Objects Platform - versions 420, and 430, allows an attacker with normal BI user privileges to upload/replace any file on Business Objects server at the operating system level, enabling the attacker to take full control of the system causing a high impact on confidentiality, integrity, and availability of the application.
CVSS Score: 9.9 (CRITICAL)
CWE: CWE-434, CWE-434
References: https://launchpad.support.sap.com/#/notes/3239475; https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html; https://launchpad.support.sap.com/#/notes/3239475
CVE: CVE-2022-41268
Published: 2022-12-13
Description: In some SAP standard roles in SAP Business Planning and Consolidation - versions - SAP_BW 750, 751, 752, 753, 754, 755, 756, 757, DWCORE 200, 300, CPMBPC 810, a transaction code reserved for the customer is used. By implementing such transaction code, a malicious user may execute unauthorized transaction functionality. Under specific circumstances, a successful attack could enable an adversary to escalate their privileges to be able to read, change or delete system data.
CVSS Score: 8.5 (HIGH)
CWE: CWE-269
References: https://launchpad.support.sap.com/#/notes/3271091; https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html; https://launchpad.support.sap.com/#/notes/3271091
CVE: CVE-2022-41271
Published: 2022-12-13
Description: An unauthenticated user can attach to an open interface exposed through JNDI by the Messaging System of SAP NetWeaver Process Integration (PI) - version 7.50. This user can make use of an open naming and directory API to access services that could perform unauthorized operations. The vulnerability affects local users and data, leading to a considerable impact on confidentiality as well as availability and a limited impact on the integrity of the application. These operations can be used to:

  *  Read any information
  *  Modify sensitive information
  *  Denial of Service attacks (DoS)
  *  SQL Injection





CVSS Score: 9.4 (CRITICAL)
CWE: CWE-89, CWE-306, CWE-862, CWE-862
References: https://launchpad.support.sap.com/#/notes/3267780; https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html; https://launchpad.support.sap.com/#/notes/3267780