CVE-2022-27658

EUVD-2022-32156
Under certain conditions, SAP Innovation management - version 2.0, allows an attacker to access information which could lead to information gathering for further exploits and attacks.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
7.5 HIGH
NETWORK
LOW
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Base Score
CVSS 3.x
EPSS Score
Percentile: 46%
Affected Products (NVD)
VendorProductVersion
sapinnovation_management
2.0
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
https://dam.sap.com/mac/embed/public/pdf/a/ucQrx6G.htm?rc=10
https://launchpad.support.sap.com/#/notes/3165856
https://sapbasisworld.com/sap-security-notes-summary-march-2022/
https://dam.sap.com/mac/embed/public/pdf/a/ucQrx6G.htm?rc=10
https://launchpad.support.sap.com/#/notes/3165856