CVE-2022-39802

SAP Manufacturing Execution - versions 15.1, 15.2, 15.3, allows an attacker to exploit insufficient validation of a file path request parameter. The intended file path can be manipulated to allow arbitrary traversal of directories on the remote server. The file content within each directory can be read which may lead to information disclosure.

• CWE-22

• http://packetstormsecurity.com/files/168716/SAP-Manufacturing-Execution-Core-15.3-Path-Traversal.htmlThird Party Advisory, VDB Entry
• https://launchpad.support.sap.com/#/notes/3242933Permissions Required, Vendor Advisory
• https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.htmlVendor Advisory
• http://packetstormsecurity.com/files/168716/SAP-Manufacturing-Execution-Core-15.3-Path-Traversal.htmlThird Party Advisory, VDB Entry
• https://launchpad.support.sap.com/#/notes/3242933Permissions Required, Vendor Advisory
• https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.htmlVendor Advisory

Published

Oct 11, 2022

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2022-3978A vulnerability, which was classified as problematic, was fo…4.3
• CVE-2022-3979A vulnerability was found in NagVis up to 1.9.33 and classif…8.1
• CVE-2022-39799An attacker with no prior authentication could craft and sen…6.1
• CVE-2022-3980An XML External Entity (XEE) vulnerability allows server-sid…9.8
• CVE-2022-39800SAP BusinessObjects BI LaunchPad - versions 420, 430, is sus…6.1
• CVE-2022-39801SAP GRC Access control Emergency Access Management allows an…7.5
• CVE-2022-39803Due to lack of proper memory management, when a victim opens…7.8
• CVE-2022-39804Due to lack of proper memory management, when a victim opens…7.8
• CVE-2022-39805Due to lack of proper memory management, when a victim opens…7.8
• CVE-2022-39806Due to lack of proper memory management, when a victim opens…7.8
• CVE-2022-39807Due to lack of proper memory management, when a victim opens…5.5
• CVE-2022-39808Due to lack of proper memory management, when a victim opens…7.8