Unrated severityNVD Advisory· Published Feb 9, 2022· Updated Aug 3, 2024
CVE-2022-22534
CVE-2022-22534
Description
Due to insufficient encoding of user input, SAP NetWeaver allows an unauthenticated attacker to inject code that may expose sensitive data like user ID and password. These endpoints are normally exposed over the network and successful exploitation can partially impact confidentiality of the application.
Affected products
2- SAP SE/SAP NetWeaver (ABAP and Java application Servers)v5Range: 700
Patches
Vulnerability mechanics
References
2- launchpad.support.sap.commitrex_refsource_MISC
- www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.htmlmitrex_refsource_MISC
News mentions
0No linked articles in our index yet.