Unsecured Buffer Handling in SAP NetWeaver Application Server Java
CVE-2022-22532
9.8CRITICAL
Key Information:
- Vendor
SAP
- Vendor
- CVE Published:
- 9 February 2022
What is CVE-2022-22532?
An unauthenticated attacker can exploit a vulnerability in the SAP NetWeaver Application Server Java, where improper handling of shared memory buffers allows for the submission of maliciously crafted HTTP requests. This exploitation could lead to unauthorized execution of code, enabling an attacker to impersonate legitimate users and potentially gain access to sensitive session information.
Affected Version(s)
SAP NetWeaver Application Server Java KRNL64NUC 7.22
SAP NetWeaver Application Server Java 7.22EXT
SAP NetWeaver Application Server Java 7.49