Improper Error Handling in SAP NetWeaver Application Server
CVE-2022-22533
7.5HIGH
Key Information:
- Vendor
- SAP
- Vendor
- CVE Published:
- 9 February 2022
Summary
The vulnerability in SAP NetWeaver Application Server Java stems from improper error handling, which allows attackers to exploit multiple HTTP server requests. This exploitation can lead to excessive memory buffer usage, ultimately resulting in system shutdowns and making the application unavailable for users. Such vulnerabilities can jeopardize the stability and security of systems, highlighting the critical need for patching and secure application practices.
Affected Version(s)
SAP NetWeaver Application Server Java KRNL64NUC 7.22
SAP NetWeaver Application Server Java 7.22EXT
SAP NetWeaver Application Server Java 7.49
References
CVSS V3.1
Score:
7.5
Severity:
HIGH
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged
Timeline
Vulnerability published
Vulnerability Reserved