A high privileged user who has access to transaction SM59 can read connection details stored with the destination for http calls in SAP…

Description

A high privileged user who has access to transaction SM59 can read connection details stored with the destination for http calls in SAP NetWeaver Application Server ABAP and ABAP Platform - versions 700, 701, 702, 710, 711, 730, 731, 740, 750, 751, 752, 753, 754, 755, 756.

Timeline

Scores

EPSS (exploitation in 30 days)

0.82% · top 43% of all CVEs (7 Nov 2026)

The list uses the assigner's score when there is one, then CISA's, then NVD's: Medium 4.9.

Weakness

• CWE-200 (opens in a new tab)All about CWE-200 and its CVEs

Affected products

• SAP SE · SAP NetWeaver Application Server ABAP and ABAP Platform

  • affected 700
  • affected 701
  • affected 702
  • affected 710
  • affected 711
  • affected 730
  • affected 731
  • affected 740
  • affected 750
  • affected 751
  • affected 752
  • affected 753
  • affected 754
  • affected 755
  • affected 756

References (2)

• https://launchpad.support.sap.com/#/notes/3128473 (opens in a new tab)x_refsource_MISCx_transferred
• https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html (opens in a new tab)x_refsource_MISCx_transferred

Sources

The same CVE in the primary databases and aggregators, to check against.

• CVE.org record (opens in a new tab)
• CVE List JSON (GitHub) (opens in a new tab)
• NVD (opens in a new tab)
• FIRST EPSS (opens in a new tab)
• OSV.dev (opens in a new tab)
• GitHub Advisories (opens in a new tab)
• CIRCL Vulnerability-Lookup (opens in a new tab)

Badge for a README or a ticket

[![CVE-2022-22545](https://trackcve.app/badge/CVE-2022-22545.svg)](https://trackcve.app/cve/CVE-2022-22545)

Record last updated 3 Aug 2024, 03:14 UTC.