rainbutterfly/cve_corpus huggingface dataset:
CVE-2022-22514 Untrusted Pointer Dereference in multiple CODESYS products can lead to a DoS.
An authenticated, remote attacker can gain access to a dereferenced pointer contained in a request. The accesses can subsequently lead to local overwriting of memory in the CmpTraceMgr, whereby the attacker can neither gain the values read internally nor control the values to be written. If invalid memory is accessed, this results in a crash.
Problem types: cwe_id: CWE-822
description: CWE-822: Untrusted Pointer Dereference
Affected products: vendor: CODESYS
product: CODESYS Control RTE (SL)
vendor: CODESYS
product: CODESYS Control RTE (for Beckhoff CX) SL
vendor: CODESYS
product: CODESYS Control Win (SL)
vendor: CODESYS
product: CODESYS Gateway
vendor: CODESYS
product: CODESYS Edge Gateway for Windows
vendor: CODESYS
product: CODESYS HMI (SL)
vendor: CODESYS
product: CODESYS Development System V3
vendor: CODESYS
product: CODESYS Control Runtime System Toolkit
vendor: CODESYS
product: CODESYS Embedded Target Visu Toolkit
vendor: CODESYS
product: CODESYS Remote Target Visu Toolkit
vendor: CODESYS
product: CODESYS Control for BeagleBone SL
vendor: CODESYS
product: CODESYS Control for Beckhoff CX9020 SL
vendor: CODESYS
product: CODESYS Control for emPC-A/iMX6 SL
vendor: CODESYS
product: CODESYS Control for IOT2000 SL
vendor: CODESYS
product: CODESYS Control for Linux SL
vendor: CODESYS
product: CODESYS Control for PFC100 SL
vendor: CODESYS
product: CODESYS Control for PFC200 SL
vendor: CODESYS
product: CODESYS Control for PLCnext SL
vendor: CODESYS
product: CODESYS Control for Raspberry Pi SL
vendor: CODESYS
product: CODESYS Control for WAGO Touch Panels 600 SL
vendor: CODESYS
product: CODESYS Edge Gateway for Linux
CVSS v3.1: attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: HIGH
baseScore: 7.1
baseSeverity: HIGH
confidentialityImpact: NONE
integrityImpact: LOW
privilegesRequired: LOW
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H
version: 3.1
Published: 2022-04-07T18:21:14.309Z
CVE-2022-22515 A component of the CODESYS Control runtime system allows read and write access to configuration files
A remote, authenticated attacker could utilize the control program of the CODESYS Control runtime system to use the vulnerability in order to read and modify the configuration file(s) of the affected products.
Problem types: cwe_id: CWE-668
description: CWE-668 Exposure of Resource to Wrong Sphere
Affected products: vendor: CODESYS
product: CODESYS Control RTE (SL)
vendor: CODESYS
product: CODESYS Control RTE (for Beckhoff CX) SL
vendor: CODESYS
product: CODESYS Control Win (SL)
vendor: CODESYS
product: CODESYS HMI (SL)
vendor: CODESYS
product: CODESYS Development System V3
vendor: CODESYS
product: CODESYS Control Runtime System Toolkit
vendor: CODESYS
product: CODESYS Embedded Target Visu Toolkit
vendor: CODESYS
product: CODESYS Remote Target Visu Toolkit
vendor: CODESYS
product: CODESYS Control for BeagleBone SL
vendor: CODESYS
product: CODESYS Control for Beckhoff CX9020 SL
vendor: CODESYS
product: CODESYS Control for emPC-A/iMX6 SL
vendor: CODESYS
product: CODESYS Control for IOT2000 SL
vendor: CODESYS
product: CODESYS Control for Linux SL
vendor: CODESYS
product: CODESYS Control for PFC100 SL
vendor: CODESYS
product: CODESYS Control for PFC200 SL
vendor: CODESYS
product: CODESYS Control for PLCnext SL
vendor: CODESYS
product: CODESYS Control for Raspberry Pi SL
vendor: CODESYS
product: CODESYS Control for WAGO Touch Panels 600 SL
CVSS v3.1: attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: NONE
baseScore: 8.1
baseSeverity: HIGH
confidentialityImpact: HIGH
integrityImpact: HIGH
privilegesRequired: LOW
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N
version: 3.1
Published: 2022-04-07T18:21:16.280Z
CVE-2022-22516 CODESYS driver SysDrv3S allows SYSTEM users on Microsoft Windows to read and write in restricted memory space.
The SysDrv3S driver in the CODESYS Control runtime system on Microsoft Windows allows any system user to read and write within restricted memory space.
Problem types: cwe_id: CWE-732
description: CWE-732 Incorrect Permission Assignment for Critical Resource
Affected products: vendor: CODESYS
product: CODESYS Control RTE (SL)
vendor: CODESYS
product: CODESYS Control RTE (for Beckhoff CX) SL
vendor: CODESYS
product: CODESYS Control Win (SL)
vendor: CODESYS
product: CODESYS Development System V3
CVSS v3.1: attackComplexity: LOW
attackVector: LOCAL
availabilityImpact: HIGH
baseScore: 7.8
baseSeverity: HIGH
confidentialityImpact: HIGH
integrityImpact: HIGH
privilegesRequired: LOW
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
version: 3.1
Published: 2022-04-07T18:21:18.417Z
CVE-2022-22517 Communication Components in multiple CODESYS products vulnerable to communication channel disruption
An unauthenticated, remote attacker can disrupt existing communication channels between CODESYS products by guessing a valid channel ID and injecting packets. This results in the communication channel to be closed.
Problem types: cwe_id: CWE-334
description: CWE-334 Small Space of Random Values
Affected products: vendor: CODESYS
product: CODESYS Control RTE (SL)
vendor: CODESYS
product: CODESYS Control RTE (for Beckhoff CX) SL
vendor: CODESYS
product: CODESYS Control Win (SL)
vendor: CODESYS
product: CODESYS Gateway
vendor: CODESYS
product: CODESYS Edge Gateway for Windows
vendor: CODESYS
product: CODESYS HMI (SL)
vendor: CODESYS
product: CODESYS Development System V3
vendor: CODESYS
product: CODESYS Control Runtime System Toolkit
vendor: CODESYS
product: CODESYS Embedded Target Visu Toolkit
vendor: CODESYS
product: CODESYS Remote Target Visu Toolkit
vendor: CODESYS
product: CODESYS Control for BeagleBone SL
vendor: CODESYS
product: CODESYS Control for Beckhoff CX9020 SL
vendor: CODESYS
product: CODESYS Control for emPC-A/iMX6 SL
vendor: CODESYS
product: CODESYS Control for IOT2000 SL
vendor: CODESYS
product: CODESYS Control for Linux SL
vendor: CODESYS
product: CODESYS Control for PFC100 SL
vendor: CODESYS
product: CODESYS Control for PFC200 SL
vendor: CODESYS
product: CODESYS Control for PLCnext SL
vendor: CODESYS
product: CODESYS Control for Raspberry Pi SL
vendor: CODESYS
product: CODESYS Control for WAGO Touch Panels 600 SL
vendor: CODESYS
product: CODESYS Edge Gateway for Linux
vendor: CODESYS
product: CODESYS OPC DA Server SL
vendor: CODESYS
product: CODESYS PLCHandler
CVSS v3.1: attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: HIGH
baseScore: 7.5
baseSeverity: HIGH
confidentialityImpact: NONE
integrityImpact: NONE
privilegesRequired: NONE
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
version: 3.1
Published: 2022-04-07T18:21:20.091Z
CVE-2022-22518 A bug in the CODESYS V3 CmpUserMgr component fails to correctly apply a security policy.
A bug in CmpUserMgr component can lead to only partially applied security policies. This can result in enabled, anonymous access to components part of the applied security policy.
Problem types: cwe_id: CWE-276
description: CWE-276 Incorrect Default Permissions
Affected products: vendor: CODESYS
product: CODESYS Control for BeagleBone SL
vendor: CODESYS
product: CODESYS Control for Beckhoff CX9020 SL
vendor: CODESYS
product: CODESYS Control for emPC-A/iMX6 SL
vendor: CODESYS
product: CODESYS Control for IOT2000 SL
vendor: CODESYS
product: CODESYS Control for Linux SL
vendor: CODESYS
product: CODESYS Control for PFC100 SL
vendor: CODESYS
product: CODESYS Control for PFC200 SL
vendor: CODESYS
product: CODESYS Control for Raspberry Pi SL
vendor: CODESYS
product: CODESYS Control for WAGO Touch Panels 600 SL
vendor: CODESYS
product: CODESYS Control Runtime System Toolkit
CVSS v3.1: attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: NONE
baseScore: 6.5
baseSeverity: MEDIUM
confidentialityImpact: LOW
integrityImpact: LOW
privilegesRequired: NONE
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N
version: 3.1
Published: 2022-04-07T18:21:21.950Z
CVE-2022-22519 Special HTTP(s) Requests can cause a buffer-read causing a crash of the webserver and the runtime system.
A remote, unauthenticated attacker can send a specific crafted HTTP or HTTPS requests causing a buffer over-read resulting in a crash of the webserver of the CODESYS Control runtime system.
Problem types: cwe_id: CWE-126
description: CWE-126 Buffer Over-read
Affected products: vendor: CODESYS
product: CODESYS Control RTE (SL)
vendor: CODESYS
product: CODESYS Control RTE (for Beckhoff CX) SL
vendor: CODESYS
product: CODESYS Control Win (SL)
vendor: CODESYS
product: CODESYS HMI (SL)
vendor: CODESYS
product: CODESYS Control Runtime System Toolkit
vendor: CODESYS
product: CODESYS Embedded Target Visu Toolkit
vendor: CODESYS
product: CODESYS Remote Target Visu Toolkit
vendor: CODESYS
product: CODESYS Control for BeagleBone SL
vendor: CODESYS
product: CODESYS Control for Beckhoff CX9020 SL
vendor: CODESYS
product: CODESYS Control for emPC-A/iMX6 SL
vendor: CODESYS
product: CODESYS Control for IOT2000 SL
vendor: CODESYS
product: CODESYS Control for Linux SL
vendor: CODESYS
product: CODESYS Control for PFC100 SL
vendor: CODESYS
product: CODESYS Control for PFC200 SL
vendor: CODESYS
product: CODESYS Control for PLCnext SL
vendor: CODESYS
product: CODESYS Control for Raspberry Pi SL
vendor: CODESYS
product: CODESYS Control for WAGO Touch Panels 600 SL
CVSS v3.1: attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: HIGH
baseScore: 7.5
baseSeverity: HIGH
confidentialityImpact: NONE
integrityImpact: NONE
privilegesRequired: NONE
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
version: 3.1
Published: 2022-04-07T18:21:23.764Z
CVE-2022-22520 User enumeration vulnerability in MB connect line and Helmholz products
A remote, unauthenticated attacker can enumerate valid users by sending specific requests to the webservice of MB connect line mymbCONNECT24, mbCONNECT24 and Helmholz myREX24 and myREX24.virtual in all versions through v2.11.2.
Problem types: cwe_id: CWE-204
description: CWE-204 Response Discrepancy Information Exposure
Affected products: vendor: MB connect line
product: mymbCONNECT24
vendor: MB connect line
product: mbCONNECT24
vendor: Helmholz
product: myREX24
vendor: Helmholz
product: myREX24.virtual
CVSS v3.1: attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: NONE
baseScore: 5.3
baseSeverity: MEDIUM
confidentialityImpact: LOW
integrityImpact: NONE
privilegesRequired: NONE
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
version: 3.1
Credits: lang: en
value: SySS GmbH reported this vulnerability to Helmholz.  Helmholz reported this vulnerability to MB connect line. CERT@VDE coordinated with Helmholz & MB connect line.
Published: 2022-09-14T14:05:30.024Z
CVE-2022-22521 Privilege Escalation in Miele Benchmark Programming Tool
In Miele Benchmark Programming Tool with versions Prior to 1.2.71, executable files manipulated by attackers are unknowingly executed with users privileges. An attacker with low privileges may trick a user with administrative privileges to execute these binaries as admin.
Problem types: cwe_id: CWE-732
description: CWE-732 Incorrect Permission Assignment for Critical Resource
Affected products: vendor: Miele
product: Benchmark Programming Tool
default_status: unaffected
CVSS v3.1: attackComplexity: LOW
attackVector: LOCAL
availabilityImpact: HIGH
baseScore: 7.3
baseSeverity: HIGH
confidentialityImpact: HIGH
integrityImpact: HIGH
privilegesRequired: LOW
scope: UNCHANGED
userInteraction: REQUIRED
vectorString: CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H
version: 3.1
Credits: lang: en
value: SEC Consult Vulnerability Lab identified and reported the vulnerability to Miele PSIRT.
Published: 2022-04-27T15:15:36.343Z
CVE-2022-22522 Hard-coded credentials in Carlo Gavazzi UWP3.0 allows for authentication bypass and full control of the device
In Carlo Gavazzi UWP3.0 in multiple versions and CPY Car Park Server in Version 2.8.3 a remote, unauthenticated attacker could make use of hard-coded credentials to gain full access to the device.
Problem types: cwe_id: CWE-798
description: CWE-798 Use of Hard-coded Credentials
Affected products: vendor: Carlo Gavazzi
product: UWP 3.0 Monitoring Gateway and Controller
vendor: Carlo Gavazzi
product: UWP 3.0 Monitoring Gateway and Controller – Security Enhanced
vendor: Carlo Gavazzi
product: UWP 3.0 Monitoring Gateway and Controller – EDP version
vendor: Carlo Gavazzi
product: CPY Car Park Server
CVSS v3.1: attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: HIGH
baseScore: 9.8
baseSeverity: CRITICAL
confidentialityImpact: HIGH
integrityImpact: HIGH
privilegesRequired: NONE
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
version: 3.1
Credits: lang: en
value: Vera Mens from Claroty Research
Published: 2022-09-28T13:45:28.000Z
CVE-2022-22523 Carlo Gavazzi UWP 3.0 WebApp allows for authentication bypass
An improper authentication vulnerability exists in the Carlo Gavazzi UWP3.0 in multiple versions and CPY Car Park Server in Version 2.8.3 Web-App which allows an authentication bypass to the context of an unauthorised user if free-access is disabled.
Problem types: cwe_id: CWE-287
description: CWE-287 Improper Authentication
Affected products: vendor: Carlo Gavazzi
product: UWP 3.0 Monitoring Gateway and Controller
vendor: Carlo Gavazzi
product: UWP 3.0 Monitoring Gateway and Controller – Security Enhanced
vendor: Carlo Gavazzi
product: UWP 3.0 Monitoring Gateway and Controller – EDP version
vendor: Carlo Gavazzi
product: CPY Car Park Server
CVSS v3.1: attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: NONE
baseScore: 7.5
baseSeverity: HIGH
confidentialityImpact: HIGH
integrityImpact: NONE
privilegesRequired: NONE
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
version: 3.1
Credits: lang: en
value: Vera Mens from Claroty Research
Published: 2022-09-28T13:45:29.000Z
CVE-2022-22524 SQL-injection in Carlo Gavazzi UWP 3.0 allows for full database access
In Carlo Gavazzi UWP3.0 in multiple versions and CPY Car Park Server in Version 2.8.3 an unauthenticated remote attacker could utilize a SQL-Injection vulnerability to gain full database access, modify users and stop services .
Problem types: cwe_id: CWE-89
description: CWE-89 SQL Injection
Affected products: vendor: Carlo Gavazzi
product: UWP 3.0 Monitoring Gateway and Controller
vendor: Carlo Gavazzi
product: UWP 3.0 Monitoring Gateway and Controller – Security Enhanced
vendor: Carlo Gavazzi
product: UWP 3.0 Monitoring Gateway and Controller – EDP version
vendor: Carlo Gavazzi
product: CPY Car Park Server
CVSS v3.1: attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: HIGH
baseScore: 9.4
baseSeverity: CRITICAL
confidentialityImpact: HIGH
integrityImpact: LOW
privilegesRequired: NONE
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:H
version: 3.1
Credits: lang: en
value: Vera Mens from Claroty Research
Published: 2022-09-28T13:45:30.000Z
CVE-2022-22525 Command injection in restore function of Carlo Gavazzi UWP3.0 allows for command injection
In Carlo Gavazzi UWP3.0 in multiple versions and CPY Car Park Server in Version 2.8.3 an remote attacker with admin rights could execute arbitrary commands due to missing input sanitization in the backup restore function
Problem types: cwe_id: CWE-20
description: CWE-20 Improper Input Validation
Affected products: vendor: Carlo Gavazzi
product: UWP 3.0 Monitoring Gateway and Controller
vendor: Carlo Gavazzi
product: UWP 3.0 Monitoring Gateway and Controller – Security Enhanced
vendor: Carlo Gavazzi
product: UWP 3.0 Monitoring Gateway and Controller – EDP version
vendor: Carlo Gavazzi
product: CPY Car Park Server
CVSS v3.1: attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: HIGH
baseScore: 7.2
baseSeverity: HIGH
confidentialityImpact: HIGH
integrityImpact: HIGH
privilegesRequired: HIGH
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
version: 3.1
Credits: lang: en
value: Vera Mens from Claroty Research
Published: 2022-09-28T13:45:30.000Z
CVE-2022-22526 Missing authentication for API in Carlo Gavazzi UWP 3.0 Car Park Server
In Carlo Gavazzi UWP3.0 in multiple versions and CPY Car Park Server in Version 2.8.3 a missing authentication allows for full access via API.
Problem types: cwe_id: CWE-306
description: CWE-306 Missing Authentication for Critical Function
Affected products: vendor: Carlo Gavazzi
product: UWP 3.0 Monitoring Gateway and Controller
vendor: Carlo Gavazzi
product: UWP 3.0 Monitoring Gateway and Controller – Security Enhanced
vendor: Carlo Gavazzi
product: UWP 3.0 Monitoring Gateway and Controller – EDP version
vendor: Carlo Gavazzi
product: CPY Car Park Server
CVSS v3.1: attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: HIGH
baseScore: 9.8
baseSeverity: CRITICAL
confidentialityImpact: HIGH
integrityImpact: HIGH
privilegesRequired: NONE
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
version: 3.1
Credits: lang: en
value: Vera Mens from Claroty Research
Published: 2022-09-28T13:45:31.000Z
CVE-2022-22528 
SAP Adaptive Server Enterprise (ASE) - version 16.0, installation makes an entry in the system PATH environment variable in Windows platform which, under certain conditions, allows a Standard User to execute malicious Windows binaries which may lead to privilege escalation on the local system. The issue is with the ASE installer and does not impact other ASE binaries.
Problem types: cwe_id: CWE-427
description: CWE-427 Uncontrolled Search Path Element
Affected products: vendor: SAP SE
product: SAP Adaptive Server Enterprise
default_status: unaffected
Published: 2022-02-09T22:05:19.000Z
CVE-2022-22529 
SAP Enterprise Threat Detection (ETD) - version 2.0, does not sufficiently encode user-controlled inputs which may lead to an unauthorized attacker possibly exploit XSS vulnerability. The UIs in ETD are using SAP UI5 standard controls, the UI5 framework provides automated output encoding for its standard controls. This output encoding prevents stored malicious user input from being executed when it is reflected in the UI.
Problem types: description: Cross-Site Scripting
Affected products: vendor: SAP SE
product: SAP Enterprise Threat Detection
default_status: unaffected
Published: 2022-01-14T19:11:30.000Z
CVE-2022-22530 
The F0743 Create Single Payment application of SAP S/4HANA - versions 100, 101, 102, 103, 104, 105, 106, does not check uploaded or downloaded files. This allows an attacker with basic user rights to inject dangerous content or malicious code which could result in critical information being modified or completely compromise the availability of the application.
Problem types: description: Code Injection
Affected products: vendor: SAP SE
product: SAP S/4HANA
default_status: unaffected
Published: 2022-01-14T19:11:26.000Z
CVE-2022-22531 
The F0743 Create Single Payment application of SAP S/4HANA - versions 100, 101, 102, 103, 104, 105, 106, does not check uploaded or downloaded files. This allows an attacker with basic user rights to run arbitrary script code, resulting in sensitive information being disclosed or modified.
Problem types: description: Cross-Site Scripting
Affected products: vendor: SAP SE
product: SAP S/4HANA
default_status: unaffected
Published: 2022-01-14T19:11:28.000Z
CVE-2022-22532 
In SAP NetWeaver Application Server Java - versions KRNL64NUC 7.22, 7.22EXT, 7.49, KRNL64UC, 7.22, 7.22EXT, 7.49, 7.53, KERNEL 7.22, 7.49, 7.53, an unauthenticated attacker could submit a crafted HTTP server request which triggers improper shared memory buffer handling. This could allow the malicious payload to be executed and hence execute functions that could be impersonating the victim or even steal the victim's logon session.
Problem types: cwe_id: CWE-444
description: CWE-444
Affected products: vendor: SAP SE
product: SAP NetWeaver Application Server Java
Published: 2022-02-09T22:05:19.000Z
CVE-2022-22533 
Due to improper error handling in SAP NetWeaver Application Server Java - versions KRNL64NUC 7.22, 7.22EXT, 7.49, KRNL64UC, 7.22, 7.22EXT, 7.49, 7.53, KERNEL 7.22, 7.49, 7.53, an attacker could submit multiple HTTP server requests resulting in errors, such that it consumes the memory buffer. This could result in system shutdown rendering the system unavailable.
Problem types: cwe_id: CWE-416
description: CWE-416
Affected products: vendor: SAP SE
product: SAP NetWeaver Application Server Java
Published: 2022-02-09T22:05:20.000Z
CVE-2022-22534 
Due to insufficient encoding of user input, SAP NetWeaver allows an unauthenticated attacker to inject code that may expose sensitive data like user ID and password. These endpoints are normally exposed over the network and successful exploitation can partially impact confidentiality of the application.
Problem types: description: Cross-Site Scripting
Affected products: vendor: SAP SE
product: SAP NetWeaver (ABAP and Java application Servers)
Published: 2022-02-09T22:05:21.000Z
CVE-2022-22535 
SAP ERP HCM Portugal - versions 600, 604, 608, does not perform necessary authorization checks for a report that reads the payroll data of employees in a certain area. Since the affected report only reads the payroll information, the attacker can neither modify any information nor cause availability impacts.
Problem types: cwe_id: CWE-862
description: CWE-862
Affected products: vendor: SAP SE
product: SAP ERP HCM (Portugal)
Published: 2022-02-09T22:05:21.000Z
CVE-2022-22536 
SAP NetWeaver Application Server ABAP, SAP NetWeaver Application Server Java, ABAP Platform, SAP Content Server 7.53 and SAP Web Dispatcher are vulnerable for request smuggling and request concatenation. An unauthenticated attacker can prepend a victim's request with arbitrary data. This way, the attacker can execute functions impersonating the victim or poison intermediary Web caches. A successful attack could result in complete compromise of Confidentiality, Integrity and Availability of the system.
Problem types: cwe_id: CWE-444
description: CWE-444 Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
Affected products: vendor: SAP SE
product: SAP NetWeaver and ABAP Platform
default_status: unaffected
vendor: SAP SE
product: SAP Web Dispatcher
default_status: unaffected
vendor: SAP SE
product: SAP Content Server
default_status: unaffected
Published: 2022-02-09T22:05:24.000Z
CVE-2022-22537 
When a user opens a manipulated Tagged Image File Format (.tiff, 2d.x3d)) received from untrusted sources in SAP 3D Visual Enterprise Viewer - version 9.0, the application crashes and becomes temporarily unavailable to the user until restart of the application. The file format details along with their CVE relevant information can be found below.
Problem types: cwe_id: CWE-20
description: CWE-20
Affected products: vendor: SAP SE
product: SAP 3D Visual Enterprise Viewer
Published: 2022-02-09T22:05:22.000Z
CVE-2022-22538 
When a user opens a manipulated Adobe Illustrator file format (.ai, ai.x3d) received from untrusted sources in SAP 3D Visual Enterprise Viewer - version 9.0, the application crashes and becomes temporarily unavailable to the user until restart of the application. The file format details along with their CVE relevant information can be found below.
Problem types: cwe_id: CWE-20
description: CWE-20
Affected products: vendor: SAP SE
product: SAP 3D Visual Enterprise Viewer
Published: 2022-02-09T22:05:23.000Z
CVE-2022-22539 
When a user opens a manipulated JPEG file format (.jpg, 2d.x3d) received from untrusted sources in SAP 3D Visual Enterprise Viewer - version 9.0, the application crashes and becomes temporarily unavailable to the user until restart of the application. The file format details along with their CVE relevant information can be found below.
Problem types: cwe_id: CWE-20
description: CWE-20
Affected products: vendor: SAP SE
product: SAP 3D Visual Enterprise Viewer
Published: 2022-02-09T22:05:25.000Z