CVE Watch—

CVE-2022-22536

SAP Multiple Products HTTP Request Smuggling Vulnerability

CVSS

—

Sem CVSS

EPSS

97.9%

p100

KEV

SIM

18 de ago. de 2022

Exploit Today

0-100

Publicado: — · Última mod.: —

EPSS · 30d

97.9%EPSS · 30 dias97.9%

2026-10-082026-11-05

Ficha do catálogo KEV

Produto

SAP / Multiple Products

Vulnerabilidade

SAP Multiple Products HTTP Request Smuggling Vulnerability

Adicionado ao KEV

18 de ago. de 2022

Corrigir até

8 de set. de 2022

Uso conhecido em ransomware

Não

Descrição resumida

SAP NetWeaver Application Server ABAP, SAP NetWeaver Application Server Java, ABAP Platform, SAP Content Server and SAP Web Dispatcher allow HTTP request smuggling. An unauthenticated attacker can prepend a victim's request with arbitrary data, allowing for function execution impersonating the victim or poisoning intermediary Web caches.

Ação necessária

Apply updates per vendor instructions.

Notas

SAP users must have an account in order to login and access the patch. https://accounts.sap.com/saml2/idp/sso; https://nvd.nist.gov/vuln/detail/CVE-2022-22536

CVEs relacionados

Nenhum CVE relacionado por CWE ou produto.