Threat intelligence / Vulnerability
CVE-2022-22536
SAP NetWeaver Application Server ABAP, SAP NetWeaver Application Server Java, ABAP Platform, SAP Content Server and SAP Web Dispatcher allow HTTP request smuggling. An unauthenticated attacker can prepend a victim's request with arbitrary data, allowing for function execution impersonating the victim or poisoning intermediary Web caches.
Vulnerability
TypeVulnerability
External ID—
First seen2022-08-18
Last seen2022-08-18
Confidence
—
SAP NetWeaver Application Server ABAP, SAP NetWeaver Application Server Java, ABAP Platform, SAP Content Server and SAP Web Dispatcher allow HTTP request smuggling. An unauthenticated attacker can prepend a victim's request with arbitrary data, allowing for function execution impersonating the victim or poisoning intermediary Web caches.
Labels
CISA KEV context
Vendor / productSAP Multiple Products
Added2022-08-18
Due date2022-09-08
3 recorded
Relationships
2 external