High severity7.5NVD Advisory· Published Feb 9, 2022· Updated Jun 17, 2026
CVE-2022-22533
CVE-2022-22533
Description
Due to improper error handling in SAP NetWeaver Application Server Java - versions KRNL64NUC 7.22, 7.22EXT, 7.49, KRNL64UC, 7.22, 7.22EXT, 7.49, 7.53, KERNEL 7.22, 7.49, 7.53, an attacker could submit multiple HTTP server requests resulting in errors, such that it consumes the memory buffer. This could result in system shutdown rendering the system unavailable.
Affected products
11cpe:2.3:a:sap:netweaver_application_server_java:7.22:*:*:*:*:*:*:*+ 9 more
- cpe:2.3:a:sap:netweaver_application_server_java:7.22:*:*:*:*:*:*:*
- cpe:2.3:a:sap:netweaver_application_server_java:7.49:*:*:*:*:*:*:*
- cpe:2.3:a:sap:netweaver_application_server_java:7.53:*:*:*:*:*:*:*
- cpe:2.3:a:sap:netweaver_application_server_java:krnl64nuc_7.22:*:*:*:*:*:*:*
- cpe:2.3:a:sap:netweaver_application_server_java:krnl64nuc_7.22ext:*:*:*:*:*:*:*
- cpe:2.3:a:sap:netweaver_application_server_java:krnl64nuc_7.49:*:*:*:*:*:*:*
- cpe:2.3:a:sap:netweaver_application_server_java:krnl64uc_7.22:*:*:*:*:*:*:*
- cpe:2.3:a:sap:netweaver_application_server_java:krnl64uc_7.22ext:*:*:*:*:*:*:*
- cpe:2.3:a:sap:netweaver_application_server_java:krnl64uc_7.49:*:*:*:*:*:*:*
- (no CPE)
- SAP SE/SAP NetWeaver Application Server Javav5Range: KRNL64NUC 7.22
Patches
Vulnerability mechanics
References
2- launchpad.support.sap.comnvdPermissions RequiredVendor Advisory
- www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.htmlnvdVendor Advisory
News mentions
0No linked articles in our index yet.