VYPR
← All advisories
Critical severity9.8NVD Advisory· Published Feb 9, 2022· Updated Jun 17, 2026

CVE-2022-22532

CVE-2022-22532

Description

In SAP NetWeaver Application Server Java - versions KRNL64NUC 7.22, 7.22EXT, 7.49, KRNL64UC, 7.22, 7.22EXT, 7.49, 7.53, KERNEL 7.22, 7.49, 7.53, an unauthenticated attacker could submit a crafted HTTP server request which triggers improper shared memory buffer handling. This could allow the malicious payload to be executed and hence execute functions that could be impersonating the victim or even steal the victim's logon session.

Affected products

13
  • SAP/Netweaver Application Server Java10 versions
    cpe:2.3:a:sap:netweaver_application_server_java:7.22:*:*:*:*:*:*:*+ 9 more
    • cpe:2.3:a:sap:netweaver_application_server_java:7.22:*:*:*:*:*:*:*
    • cpe:2.3:a:sap:netweaver_application_server_java:7.49:*:*:*:*:*:*:*
    • cpe:2.3:a:sap:netweaver_application_server_java:7.53:*:*:*:*:*:*:*
    • cpe:2.3:a:sap:netweaver_application_server_java:krnl64nuc_7.22:*:*:*:*:*:*:*
    • cpe:2.3:a:sap:netweaver_application_server_java:krnl64nuc_7.22ext:*:*:*:*:*:*:*
    • cpe:2.3:a:sap:netweaver_application_server_java:krnl64nuc_7.49:*:*:*:*:*:*:*
    • cpe:2.3:a:sap:netweaver_application_server_java:krnl64uc_7.22:*:*:*:*:*:*:*
    • cpe:2.3:a:sap:netweaver_application_server_java:krnl64uc_7.22ext:*:*:*:*:*:*:*
    • cpe:2.3:a:sap:netweaver_application_server_java:krnl64uc_7.49:*:*:*:*:*:*:*
    • (no CPE)
  • SAP/KRNL64NUCllm-create
  • SAP/KRNL64UCllm-create
  • SAP SE/SAP NetWeaver Application Server Javav5
    Range: KRNL64NUC 7.22

Patches

Vulnerability mechanics

References

2

News mentions

0

No linked articles in our index yet.