CVE-2022-41212
Get alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2022-41212
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Description
Due to insufficient input validation, SAP NetWeaver Application Server ABAP and ABAP Platform allows an attacker with high level privileges to use a remote enabled function to read a file which is otherwise restricted. On successful exploitation an attacker can completely compromise the confidentiality of the application.
Source: NVD (National Vulnerability Database)
CVSS Information
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Type
对路径名的限制不恰当(路径遍历)
Source: NVD (National Vulnerability Database)
Vulnerability Title
SAP NetWeaver和SAP NetWeaver Application Server 路径遍历漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
SAP NetWeaver和SAP NetWeaver Application Server都是德国思爱普（SAP）公司的产品。SAP NetWeaver是一套面向服务的集成化应用平台。该平台主要为SAP应用程序提供开发和运行环境。ABAP是一款运行于NetWeaver中且基于ABAP高级编程语言的应用服务器。SAP NetWeaver Application Server是一款应用程序服务器。 SAP NetWeaver Application Server ABAP和ABAP Platform存在路径
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| SAP SE | SAP NetWeaver Application Server ABAP and ABAP Platform | = 700 | - |
II. Public POCs for CVE-2022-41212
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2022-41212
请登录查看更多情报信息。
Same Patch Batch · SAP SE · 2022-11-08 · 11 CVEs total
| CVE-2022-41214 | 8.7 HIGH | SAP NetWeaver和SAP NetWeaver Application Server 输入验证错误漏洞 |
| CVE-2022-41211 | 7.0 HIGH | SAP 3D Visual Enterprise Viewer和SAP 3D Visual Enterprise Author 缓冲区错误漏洞 |
| CVE-2022-41258 | 6.5 MEDIUM | SAP Financial Consolidation 跨站脚本漏洞 |
| CVE-2022-41260 | 6.1 MEDIUM | SAP Financial Consolidation 跨站脚本漏洞 |
| CVE-2022-41205 | 5.5 MEDIUM | SAP GUI 代码注入漏洞 |
| CVE-2022-41208 | 5.4 MEDIUM | SAP Financial Consolidation 跨站脚本漏洞 |
| CVE-2022-41215 | 4.7 MEDIUM | SAP NetWeaver和SAP NetWeaver ABAP Server 输入验证错误漏洞 |
| CVE-2022-41203 | SAP BusinessObjects BI Platform 代码问题漏洞 | |
| CVE-2022-41207 | SAP Biller Direct 输入验证错误漏洞 | |
| CVE-2022-41259 | SAP SQL Anywhere 安全漏洞 |
IV. Related Vulnerabilities
Same product: SAP NetWeaver Application Server ABAP and ABAP Platform
- CVE-2026-0509
Missing Authorization check in SAP NetWeaver Application Ser - CVE-2026-0506
Missing Authorization check in SAP NetWeaver Application Ser - CVE-2025-42969
Cross-Site Scripting (XSS) vulnerability in SAP NetWeaver Ap - CVE-2025-31329
Information Disclosure vulnerability in SAP NetWeaver Applic - CVE-2024-41734
Missing Authorization check in SAP NetWeaver Application Ser
Same vendor: SAP SE
- CVE-2025-42956
Multiple vulnerabilities in SAP NetWeaver Application Server - CVE-2023-36920
Clickjacking vulnerability in SAP Enable Now - CVE-2023-40307
Privileges Memory Corruption (Out-of-bound write) - CVE-2023-40306
URL Redirection vulnerability in SAP S/4HANA (Manage Catalog - CVE-2022-41211
SAP 3D Visual Enterprise Viewer和SAP 3D Visual Enterprise Aut
Same weakness: CWE-22
- CVE-2026-8274
npitre cramfs-tools Directory cramfsck.c do_directory path t - CVE-2022-50956
WordPress Plugin amministrazione-aperta 3.7.3 Local File Rea - CVE-2026-8215
Industrial Application Software IAS Canias ERP RMI iasReques - CVE-2026-42605
AzuraCast: Path Traversal in `currentDirectory` Parameter En - CVE-2026-42574
apko dirFS has a symlink-following path traversal that allow
V. Comments for CVE-2022-41212
No comments yet