Improper Error Handling in SAP NetWeaver Application Server
CVE-2022-22533

7.5HIGH

Key Information:

Vendor
SAP
Vendor
CVE Published:
9 February 2022

Summary

The vulnerability in SAP NetWeaver Application Server Java stems from improper error handling, which allows attackers to exploit multiple HTTP server requests. This exploitation can lead to excessive memory buffer usage, ultimately resulting in system shutdowns and making the application unavailable for users. Such vulnerabilities can jeopardize the stability and security of systems, highlighting the critical need for patching and secure application practices.

Affected Version(s)

SAP NetWeaver Application Server Java KRNL64NUC 7.22

SAP NetWeaver Application Server Java 7.22EXT

SAP NetWeaver Application Server Java 7.49

References

CVSS V3.1

Score:
7.5
Severity:
HIGH
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.