2022 CVE Vulnerabilities
27,563 CVEs published in 2022.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2022-41259 | MEDIUM | 6.5 | 0.7% | Nov 8, 2022 | SAP SQL Anywhere - version 17.0, allows an authenticated attacker to prevent legitimate users from accessing a SQL Anywh... |
| CVE-2022-41258 | MEDIUM | 6.5 | 0.4% | Nov 8, 2022 | Due to insufficient input validation, SAP Financial Consolidation - version 1010, allows an authenticated attacker to in... |
| CVE-2022-41215 | MEDIUM | 4.7 | 0.4% | Nov 8, 2022 | SAP NetWeaver ABAP Server and ABAP Platform allows an unauthenticated attacker to redirect users to a malicious site due... |
| CVE-2022-41214 | HIGH | 8.7 | 0.7% | Nov 8, 2022 | Due to insufficient input validation, SAP NetWeaver Application Server ABAP and ABAP Platform allows an attacker with hi... |
| CVE-2022-41212 | MEDIUM | 4.9 | 0.8% | Nov 8, 2022 | Due to insufficient input validation, SAP NetWeaver Application Server ABAP and ABAP Platform allows an attacker with hi... |
| CVE-2022-41211 | HIGH | 7.8 | 0.3% | Nov 8, 2022 | Due to lack of proper memory management, when a victim opens manipulated file received from untrusted sources in SAP 3D ... |
| CVE-2022-41208 | MEDIUM | 5.4 | 0.4% | Nov 8, 2022 | Due to insufficient input validation, SAP Financial Consolidation - version 1010, allows an authenticated attacker with ... |
| CVE-2022-41207 | MEDIUM | 6.1 | 0.4% | Nov 8, 2022 | SAP Biller Direct allows an unauthenticated attacker to craft a legitimate looking URL. When clicked by an unsuspecting ... |
| CVE-2022-41205 | MEDIUM | 6.1 | 0.2% | Nov 8, 2022 | SAP GUI allows an authenticated attacker to execute scripts in the local network. On successful exploitation, the attack... |
| CVE-2022-41203 | HIGH | 8.8 | 0.9% | Nov 8, 2022 | In some workflow of SAP BusinessObjects BI Platform (Central Management Console and BI LaunchPad), an authenticated atta... |
| CVE-2022-3821 | MEDIUM | 5.5 | 0.4% | Nov 8, 2022 | An off-by-one Error issue was discovered in Systemd in format_timespan() function of time-util.c. An attacker could supp... |
| CVE-2022-39386 | HIGH | 7.5 | 0.7% | Nov 8, 2022 | @fastify/websocket provides WebSocket support for Fastify. Any application using @fastify/websocket could crash if a spe... |
| CVE-2022-37015 | CRITICAL | 9.8 | 0.7% | Nov 8, 2022 | Symantec Endpoint Detection and Response (SEDR) Appliance, prior to 4.7.0, may be susceptible to a privilege escalation ... |
| CVE-2022-34825 | CRITICAL | 9.8 | 1.2% | Nov 8, 2022 | Uncontrolled Search Path Element in CLUSTERPRO X 5.0 for Windows and earlier, EXPRESSCLUSTER X 5.0 for Windows and earli... |
| CVE-2022-34824 | CRITICAL | 9.8 | 1.1% | Nov 8, 2022 | Weak File and Folder Permissions vulnerability in CLUSTERPRO X 5.0 for Windows and earlier, EXPRESSCLUSTER X 5.0 for Win... |
| CVE-2022-34823 | CRITICAL | 9.8 | 1.2% | Nov 8, 2022 | Buffer overflow vulnerability in CLUSTERPRO X 5.0 for Windows and earlier, EXPRESSCLUSTER X 5.0 for Windows and earlier,... |
| CVE-2022-34822 | CRITICAL | 9.8 | 1.4% | Nov 8, 2022 | Path traversal vulnerability in CLUSTERPRO X 5.0 for Windows and earlier, EXPRESSCLUSTER X 5.0 for Windows and earlier, ... |
| CVE-2022-27516 | CRITICAL | 9.8 | 0.6% | Nov 8, 2022 | User login brute force protection functionality bypass |
| CVE-2022-27513 | CRITICAL | 9.6 | 0.3% | Nov 8, 2022 | Remote desktop takeover via phishing |
| CVE-2022-27510 | CRITICAL | 9.8 | 1.2% | Nov 8, 2022 | Unauthorized access to Gateway user capabilities |
| CVE-2022-20465 | MEDIUM | 4.6 | 0.9% | Nov 8, 2022 | In dismiss and related functions of KeyguardHostViewController.java and related files, there is a possible lockscreen by... |
| CVE-2022-20463 | — | — | — | Nov 8, 2022 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Fu... |
| CVE-2022-20462 | HIGH | 7.8 | 0.1% | Nov 8, 2022 | In phNxpNciHal_write_unlocked of phNxpNciHal.cc, there is a possible out of bounds write due to a missing bounds check. ... |
| CVE-2022-20457 | MEDIUM | 5.5 | 0.1% | Nov 8, 2022 | In getMountModeInternal of StorageManagerService.java, there is a possible prevention of package installation due to imp... |
| CVE-2022-20454 | MEDIUM | 6.7 | 0.1% | Nov 8, 2022 | In fdt_next_tag of fdt.c, there is a possible out of bounds write due to an integer overflow. This could lead to local e... |
Check if your code is affected by 2022 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now