Vulnerabilities
Vulnerable Software

Vulnerability Details CVE-2022-41264

Due to the unrestricted scope of the RFC function module, SAP BASIS - versions 731, 740, 750, 751, 752, 753, 754, 755, 756, 757, 789, 790, 791, allows an authenticated non-administrator attacker to access a system class and execute any of its public methods with parameters provided by the attacker. On successful exploitation the attacker can have full control of the system to which the class belongs, causing a high impact on the integrity of the application.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.005
EPSS Ranking 63.1%
CVSS Severity
CVSS v3 Score 8.8
Products affected by CVE-2022-41264
  • Sap » Basis » Version: 7.31
    cpe:2.3:a:sap:basis:7.31
  • Sap » Basis » Version: 7.40
    cpe:2.3:a:sap:basis:7.40
  • Sap » Basis » Version: 7.50
    cpe:2.3:a:sap:basis:7.50
  • Sap » Basis » Version: 7.51
    cpe:2.3:a:sap:basis:7.51
  • Sap » Basis » Version: 7.52
    cpe:2.3:a:sap:basis:7.52
  • Sap » Basis » Version: 7.53
    cpe:2.3:a:sap:basis:7.53
  • Sap » Basis » Version: 7.54
    cpe:2.3:a:sap:basis:7.54
  • Sap » Basis » Version: 7.55
    cpe:2.3:a:sap:basis:7.55
  • Sap » Basis » Version: 7.56
    cpe:2.3:a:sap:basis:7.56
  • Sap » Basis » Version: 7.57
    cpe:2.3:a:sap:basis:7.57
  • Sap » Basis » Version: 7.89
    cpe:2.3:a:sap:basis:7.89
  • Sap » Basis » Version: 7.90
    cpe:2.3:a:sap:basis:7.90
  • Sap » Basis » Version: 7.91
    cpe:2.3:a:sap:basis:7.91


Contact Us

Shodan ® - All rights reserved