SAP SE SAP Focused Run (Simple Diagnostics Agent)

• CVE-2022-27657 Unrated A highly privileged remote attacker, can gain unauthorized access to display contents of restricted directories by exploiting insufficient validation of path information in SAP Focused Run (Simple Dia 2.5%
• CVE-2022-24396 Unrated The Simple Diagnostics Agent - versions 1.0 up to version 1.57, does not perform any authentication checks for functionalities that can be accessed via localhost on http port 3005. Due to lack of auth 0.5%