CVE-2022-22544

Solution Manager (Diagnostics Root Cause Analysis Tools) - version 720, allows an administrator to execute code on all connected Diagnostics Agents and browse files on their systems. An attacker could thereby control the managed systems. It is considered that this is a missing segregation of duty for the SAP Solution Manager administrator. Impacts of unauthorized execution of commands can lead to sensitive information disclosure, loss of system integrity and denial of service.

• https://launchpad.support.sap.com/#/notes/3140940Permissions Required, Vendor Advisory
• https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.htmlVendor Advisory
• https://launchpad.support.sap.com/#/notes/3140940Permissions Required, Vendor Advisory
• https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.htmlVendor Advisory

Published

Feb 9, 2022

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2022-22539When a user opens a manipulated JPEG file format (.jpg, 2d.x…6.5
• CVE-2022-2254A user with administrative privileges in Distributed Data Sy…4.8
• CVE-2022-22540SAP NetWeaver AS ABAP (Workplace Server) - versions 700, 701…7.5
• CVE-2022-22541SAP BusinessObjects Business Intelligence Platform - version…6.5
• CVE-2022-22542S/4HANA Supplier Factsheet exposes the private address and b…6.5
• CVE-2022-22543SAP NetWeaver Application Server for ABAP (Kernel) and ABAP …7.5
• CVE-2022-22545A high privileged user who has access to transaction SM59 ca…4.9
• CVE-2022-22546Due to improper HTML encoding in input control summary, an a…5.4
• CVE-2022-22547Simple Diagnostics Agent - versions 1.0 (up to version 1.57.…7.5
• CVE-2022-22549Dell PowerScale OneFS, 8.2.x-9.3.x, contains a Improper Cert…8.1
• CVE-2022-2255A vulnerability was found in mod_wsgi. The X-Client-IP heade…7.5
• CVE-2022-22550Dell PowerScale OneFS, versions 8.2.2 and above, contain a p…6.7