// For flags

CVE-2022-22542

 

Severity Score

6.5
*CVSS v3.1

Exploit Likelihood

*EPSS

Affected Versions

*CPE

Public Exploits

0
*Multiple Sources

Exploited in Wild

-
*KEV

Decision

-
*SSVC
Descriptions

S/4HANA Supplier Factsheet exposes the private address and bank details of an Employee Business Partner with Supplier Role, AND Enterprise Search for Customer, Supplier and Business Partner objects exposes the private address fields of Employee Business Partners, to an actor that is not explicitly authorized to have access to that information, which could compromise Confidentiality.

S/4HANA Supplier Factsheet expone la dirección privada y los datos bancarios de un Business Partner empleado con rol de proveedor, Y Enterprise Search for Customer, Supplier and Business Partner objects expone los campos de dirección privada de los Business Partners empleados, a un actor que no está explícitamente autorizado a tener acceso a esa información, lo que podría comprometer la Confidencialidad

*Credits: N/A
CVSS Scores
Attack Vector
Network
Attack Complexity
Low
Privileges Required
Low
User Interaction
None
Scope
Unchanged
Confidentiality
High
Integrity
None
Availability
None
Attack Vector
Network
Attack Complexity
Low
Authentication
Single
Confidentiality
Partial
Integrity
None
Availability
None
* Common Vulnerability Scoring System
SSVC
  • Decision:-
Exploitation
-
Automatable
-
Tech. Impact
-
* Organization's Worst-case Scenario
Timeline
  • 2022-01-04 CVE Reserved
  • 2022-02-09 CVE Published
  • 2023-09-02 EPSS Updated
  • 2024-08-03 CVE Updated
  • ---------- Exploited in Wild
  • ---------- KEV Due Date
  • ---------- First Exploit
CWE
  • CWE-200: Exposure of Sensitive Information to an Unauthorized Actor
CAPEC
Affected Vendors, Products, and Versions
Vendor Product Version Other Status
Vendor Product Version Other Status <-- --> Vendor Product Version Other Status
Sap
Search vendor "Sap"
 S\/4hana
Search vendor "Sap" for product "S\/4hana"
 104
Search vendor "Sap" for product "S\/4hana" and version "104"
-
Affected
Sap
Search vendor "Sap"
 S\/4hana
Search vendor "Sap" for product "S\/4hana"
 105
Search vendor "Sap" for product "S\/4hana" and version "105"
-
Affected
Sap
Search vendor "Sap"
 S\/4hana
Search vendor "Sap" for product "S\/4hana"
 106
Search vendor "Sap" for product "S\/4hana" and version "106"
-
Affected