VYPR
← All advisories
Medium severity4.3NVD Advisory· Published Jul 12, 2022· Updated Jun 17, 2026

CVE-2022-31592

CVE-2022-31592

Description

The application SAP Enterprise Extension Defense Forces & Public Security - versions 605, 606, 616,617,618, 802, 803, 804, 805, 806, does not perform necessary authorization checks for an authenticated user over the network, resulting in escalation of privileges leading to a limited impact on confidentiality.

Affected products

12
  • SAP SE/SAP Enterprise Extension Defense Forces & Public Security (EA-DFPS)v5
    Range: 605
  • SAP/Enterprise Extension Defense Forces \& Public Securityllm-fuzzy11 versions
    605, 606, 616, 617, 618, 802, 803, 804, 805, 806+ 10 more
    • (no CPE)range: 605, 606, 616, 617, 618, 802, 803, 804, 805, 806
    • cpe:2.3:a:sap:enterprise_extension_defense_forces_\&_public_security:605:*:*:*:*:*:*:*
    • cpe:2.3:a:sap:enterprise_extension_defense_forces_\&_public_security:606:*:*:*:*:*:*:*
    • cpe:2.3:a:sap:enterprise_extension_defense_forces_\&_public_security:616:*:*:*:*:*:*:*
    • cpe:2.3:a:sap:enterprise_extension_defense_forces_\&_public_security:617:*:*:*:*:*:*:*
    • cpe:2.3:a:sap:enterprise_extension_defense_forces_\&_public_security:618:*:*:*:*:*:*:*
    • cpe:2.3:a:sap:enterprise_extension_defense_forces_\&_public_security:802:*:*:*:*:*:*:*
    • cpe:2.3:a:sap:enterprise_extension_defense_forces_\&_public_security:803:*:*:*:*:*:*:*
    • cpe:2.3:a:sap:enterprise_extension_defense_forces_\&_public_security:804:*:*:*:*:*:*:*
    • cpe:2.3:a:sap:enterprise_extension_defense_forces_\&_public_security:805:*:*:*:*:*:*:*
    • cpe:2.3:a:sap:enterprise_extension_defense_forces_\&_public_security:806:*:*:*:*:*:*:*

Patches

Vulnerability mechanics

References

2

News mentions

0

No linked articles in our index yet.