CVE-2022-29614

SAP startservice - of SAP NetWeaver Application Server ABAP, Application Server Java, ABAP Platform and HANA Database - versions KERNEL 7.22, 7.49, 7.53, 7.77, 7.81, 7.85, 7.86, 7.87, 7.88, KRNL64NUC 7.22, 7.22EXT, 7.49, KRNL64UC 7.22, 7.22EXT, 7.49, 7.53, SAPHOSTAGENT 7.22, - on Unix systems, s-bit helper program sapuxuserchk, can be abused physically resulting in a privilege escalation of an attacker leading to low impact on confidentiality and integrity, but a profound impact on availability.

• CWE-269

• http://packetstormsecurity.com/files/168409/SAP-SAPControl-Web-Service-Interface-Local-Privilege-Escalation.htmlExploit, Third Party Advisory
• http://seclists.org/fulldisclosure/2022/Sep/18Exploit, Mailing List, Third Party Advisory
• https://launchpad.support.sap.com/#/notes/3158619Permissions Required, Vendor Advisory
• https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.htmlVendor Advisory
• http://packetstormsecurity.com/files/168409/SAP-SAPControl-Web-Service-Interface-Local-Privilege-Escalation.htmlExploit, Third Party Advisory
• http://seclists.org/fulldisclosure/2022/Sep/18Exploit, Mailing List, Third Party Advisory
• https://launchpad.support.sap.com/#/notes/3158619Permissions Required, Vendor Advisory
• https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.htmlVendor Advisory

Published

Jun 14, 2022

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2022-29609An issue was discovered in ONOS 2.5.1. An intent with the sa…5.3
• CVE-2022-2961A use-after-free flaw was found in the Linux kernel’s PLP Ro…7
• CVE-2022-29610SAP NetWeaver Application Server ABAP allows an authenticate…5.4
• CVE-2022-29611SAP NetWeaver Application Server for ABAP and ABAP Platform …8.8
• CVE-2022-29612SAP NetWeaver, ABAP Platform and SAP Host Agent - versions K…4.3
• CVE-2022-29613Due to insufficient input validation, SAP Employee Self Serv…4.3
• CVE-2022-29615SAP NetWeaver Developer Studio (NWDS) - version 7.50, is bas…3.4
• CVE-2022-29616SAP Host Agent, SAP NetWeaver and ABAP Platform allow an att…7.5
• CVE-2022-29617Due to improper error handling an authenticated user can cra…6.5
• CVE-2022-29618Due to insufficient input validation, SAP NetWeaver Developm…6.1
• CVE-2022-29619Under certain conditions SAP BusinessObjects Business Intell…6.5
• CVE-2022-2962A DMA reentrancy issue was found in the Tulip device emulati…7.8