What’s Vulnerable › Vulnerabilities
CVE-2024-47595: Local Privilege Escalation in SAP Host Agent
- Severity: high (CVSS 7.1 v3.1)
- Exploited in the wild: not listed in CISA KEV
- EPSS: 0.1% probability of exploitation in the next 30 days
- Public exploit or detection template: none known
- Published: 2024-11-12 · updated 2026-06-17
- Weakness: CWE-266
Description
An attacker who gains local membership to sapsys group could replace local files usually protected by privileged access. On successful exploitation the attacker could cause high impact on confidentiality and integrity of the application.
Affected products
- SAP SE SAP Host Agent: 7.22
References
Get alerted when CVE-2024-47595 or the next vulnerability affects your stack