CVE-2022-41264 Information

Description

Due to the unrestricted scope of the RFC function module SAP BASIS - versions 731 740 750 751 752 753 754 755 756 757 789 790 791 allows an authenticated non-administrator attacker to access a system class and execute any of its public methods with parameters provided by the attacker. On successful exploitation the attacker can have full control of the system to which the class belongs causing a high impact on the integrity of the application.

Reference

https://launchpad.support.sap.com/#/notes/3268172 https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html