CVE-2022-22534
N/A
N/A
Summary
Due to insufficient encoding of user input, SAP NetWeaver allows an unauthenticated attacker to inject code that may expose sensitive data like user ID and password. These endpoints are normally exposed over the network and successful exploitation can partially impact confidentiality of the application.
Affected Software
| Vendor | Product | Version Range | Status |
|---|---|---|---|
| SAP SE | SAP NetWeaver (ABAP and Java application Servers) | 700 | affected |
| SAP SE | SAP NetWeaver (ABAP and Java application Servers) | 701 | affected |
| SAP SE | SAP NetWeaver (ABAP and Java application Servers) | 702 | affected |
| SAP SE | SAP NetWeaver (ABAP and Java application Servers) | 731 | affected |
| SAP SE | SAP NetWeaver (ABAP and Java application Servers) | 740 | affected |
| SAP SE | SAP NetWeaver (ABAP and Java application Servers) | 750 | affected |
| SAP SE | SAP NetWeaver (ABAP and Java application Servers) | 751 | affected |
| SAP SE | SAP NetWeaver (ABAP and Java application Servers) | 752 | affected |
| SAP SE | SAP NetWeaver (ABAP and Java application Servers) | 753 | affected |
| SAP SE | SAP NetWeaver (ABAP and Java application Servers) | 754 | affected |
| SAP SE | SAP NetWeaver (ABAP and Java application Servers) | 755 | affected |
| SAP SE | SAP NetWeaver (ABAP and Java application Servers) | 756 | affected |
Weaknesses
- Cross-Site Scripting
ADP Enrichment
CVE Program Container
Additional References
- https://launchpad.support.sap.com/#/notes/3124994
- https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html
References
- https://launchpad.support.sap.com/#/notes/3124994
- https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html
Feedback
Was this page helpful?
Glad to hear it! Please tell us how we can improve.
Sorry to hear that. Please tell us how we can improve.