What is CVE-2022-41268?

CVE-2022-41268 is a high-severity vulnerability in Sap Business Planning And Consolidation, classified under Improper Privilege Management. CVSS score: 8.5/10. Published 2022-12-13.

How severe is CVE-2022-41268?

High severity. CVSS v3 base score is 8.5 out of 10.

Privilege escalation in Sap Business Planning And Consolidation

CVE-2022-41268

In some SAP standard roles in SAP Business Planning and Consolidation - versions - SAP_BW 750, 751, 752, 753, 754, 755, 756, 757, DWCORE 200, 300, CPMBPC 810, a transaction code reserved for the customer is used. By implementing such trans…

Vulnerability class: Privilege Escalation

EPSS: 0.006 (43.6th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 8.5 (High). Vector: CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H.

Affected products

Sap Business Planning And Consolidation — versions SAP_BW 750, DWCORE 200, CPMBPC 810
Sap Business_planning_and_consolidation — versions 200, 300, 750

Weakness classification (CWE)

CWE-269 — Improper Privilege Management

References

cna@sap.com (Permissions Required, Vendor Advisory)
cna@sap.com (Vendor Advisory)

Frequently asked questions

What is CVE-2022-41268?: CVE-2022-41268 is a high-severity vulnerability in Sap Business Planning And Consolidation, classified under Improper Privilege Management. CVSS score: 8.5/10. Published 2022-12-13.
How severe is CVE-2022-41268?: High severity. CVSS v3 base score is 8.5 out of 10.