Back to Database
Status published
High
CVE-2022-1248
SAP Information System POST Request add_admin.php improper authentication
Vulnerability Description
A vulnerability was found in SAP Information System 1.0 which has been rated as critical. Affected by this issue is the file /SAP_Information_System/controllers/add_admin.php. An unauthenticated attacker is able to create a new admin account for the web application with a simple POST request. Exploit details were disclosed.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2022-1248
Credits & Attribution
No credits recorded in the NVD database.
References
More from unspecified
View All →CVE-2022-4642
tatoeba2 Profile Name cross site scripting
Low
3.5
CVE-2022-4641
pig-vector LogisticRegression.java LogisticRegression temp file
Low
2.5
CVE-2022-4639
sslh Packet Dumping probe.c hexdump format string
Medium
5.6
CVE-2022-4638
collective.contact.widget widgets.py title cross site scripting
Low
3.5
CVE-2022-4631
WP-Ban ban-options.php cross site scripting
Low
3.5
Affected Vendor
unspecified
View all reports →Affected Software
SAP Information System
Vulnerable Versions:
1.0
Timeline
Official Publish:
April 6th, 2022
Last Modified:
April 15th, 2025
Added to House:
July 21st, 2026
CVSS Vectors
V3:
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L