Latest sap host agent Vulnerabilities

● CVE-2023-40309

SAP CommonCryptoLib does not perform necessary authentication checks, which may result in missing or wrong authorization checks for an authenticated user, resulting in escalation of privileges. Depend...

SAP CommonCryptoLib=8.0.0

SAP Content Server=6.50

SAP Content Server=7.53

SAP Content Server=7.54

Sap Extended Application Services And Runtime=1.0

SAP HANA Database=2.0

and 41 more

● CVE-2023-40308

SAP CommonCryptoLib allows an unauthenticated attacker to craft a request, which when submitted to an open port causes a memory corruption error in a library which in turn causes the target component ...

SAP CommonCryptoLib=8.0.0

SAP Content Server=6.50

SAP Content Server=7.53

SAP Content Server=7.54

Sap Extended Application Services And Runtime=1.0

SAP HANA Database=2.0

and 41 more

● CVE-2023-27498

SAP Host Agent (SAPOSCOL) - version 7.22, allows an unauthenticated attacker with network access to a server port assigned to the SAP Start Service to submit a crafted request which results in a memor...

Sap Host Agent=7.22

● CVE-2023-24523

An attacker authenticated as a non-admin user with local access to a server port assigned to the SAP Host Agent (Start Service) - versions 7.21, 7.22, can submit a crafted ConfigureOutsideDiscovery re...

Sap Host Agent=7.21

Sap Host Agent=7.22

● CVE-2023-0012

In SAP Host Agent (Windows) - versions 7.21, 7.22, an attacker who gains local membership to SAP_LocalAdmin could be able to replace executables with a malicious file that will be started under a priv...

Sap Host Agent=7.21

Sap Host Agent=7.22

Microsoft Windows

● CVE-2022-35295

In SAP Host Agent (SAPOSCOL) - version 7.22, an attacker may use files created by saposcol to escalate privileges for themselves.

Sap Host Agent=7.22

● CVE-2022-29614

SAP startservice - of SAP NetWeaver Application Server ABAP, Application Server Java, ABAP Platform and HANA Database - versions KERNEL 7.22, 7.49, 7.53, 7.77, 7.81, 7.85, 7.86, 7.87, 7.88, KRNL64NUC ...

Sap Host Agent=7.22

SAP NetWeaver ABAP=kernel_7.22

SAP NetWeaver ABAP=kernel_7.49

SAP NetWeaver ABAP=kernel_7.53

SAP NetWeaver ABAP=kernel_7.77

SAP NetWeaver ABAP=kernel_7.81

and 10 more

● CVE-2022-29612

SAP NetWeaver, ABAP Platform and SAP Host Agent - versions KERNEL 7.22, 7.49, 7.53, 7.77, 7.81, 7.85, 7.86, 7.87, 7.88, 8.04, KRNL64NUC 7.22, 7.22EXT, 7.49, KRNL64UC 7.22, 7.22EXT, 7.49, 7.53, 8.04, S...

Sap Host Agent=7.22

SAP NetWeaver ABAP=kernel_7.22

SAP NetWeaver ABAP=kernel_7.49

SAP NetWeaver ABAP=kernel_7.53

SAP NetWeaver ABAP=kernel_7.77

SAP NetWeaver ABAP=kernel_7.81

and 12 more

● CVE-2022-28774

Under certain conditions, the SAP Host Agent logfile shows information which would otherwise be restricted.

Sap Host Agent=7.22

● CVE-2020-6234

SAP Host Agent, version 7.21, allows an attacker with admin privileges to use the operation framework to gain root privileges over the underlying operating system, leading to Privilege Escalation.

Sap Host Agent=7.21

● CVE-2020-6183

SAP Host Agent, version 7.21, allows an unprivileged user to read the shared memory or write to the shared memory by sending request to the main SAPOSCOL process and receive responses that may contain...

Sap Host Agent=7.21

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co

By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.