CVE-2022-29614: SAP Host Agent

Medium severity, CVSS 5.0. EPSS: 0.4% chance of exploitation in the next 30 days.

SAP startservice - of SAP NetWeaver Application Server ABAP, Application Server Java, ABAP Platform and HANA Database - versions KERNEL 7.22, 7.49, 7.53, 7.77, 7.81, 7.85, 7.86, 7.87, 7.88, KRNL64NUC 7.22, 7.22EXT, 7.49, KRNL64UC 7.22, 7.22EXT, 7.49, 7.53, SAPHOSTAGENT 7.22, - on Unix systems, s-bit helper program sapuxuserchk, can be abused physically resulting in a privilege escalation of an attacker leading to low impact on confidentiality and integrity, but a profound impact on availability.

Affected products

• SAP Host Agent: version 7.22 only
• SAP NetWeaver Abap: version kernel_7.22 only; version kernel_7.49 only; version kernel_7.53 only; version kernel_7.77 only; version kernel_7.81 only; version kernel_7.85 only; …

Published 2022-06-14. Last modified 2026-06-17.