Improper Error Handling in SAP NetWeaver Application Server
CVE-2022-22533
7.5HIGH
Key Information:
- Vendor
SAP
- Vendor
- CVE Published:
- 9 February 2022
What is CVE-2022-22533?
The vulnerability in SAP NetWeaver Application Server Java stems from improper error handling, which allows attackers to exploit multiple HTTP server requests. This exploitation can lead to excessive memory buffer usage, ultimately resulting in system shutdowns and making the application unavailable for users. Such vulnerabilities can jeopardize the stability and security of systems, highlighting the critical need for patching and secure application practices.
Affected Version(s)
SAP NetWeaver Application Server Java KRNL64NUC 7.22
SAP NetWeaver Application Server Java 7.22EXT
SAP NetWeaver Application Server Java 7.49