CVE-2022-27657: SAP Focused Run

Low severity, CVSS 2.7. EPSS: 2.5% chance of exploitation in the next 30 days.

A highly privileged remote attacker, can gain unauthorized access to display contents of restricted directories by exploiting insufficient validation of path information in SAP Focused Run (Simple Diagnostics Agent 1.0) - version 1.0.

Affected products

  • SAP Focused Run: version 1.0 only

Published 2022-04-12. Last modified 2026-06-17.