VYPR
← All advisories
Medium severity6.1NVD Advisory· Published Feb 9, 2022· Updated Jun 17, 2026

CVE-2022-22534

CVE-2022-22534

Description

Due to insufficient encoding of user input, SAP NetWeaver allows an unauthenticated attacker to inject code that may expose sensitive data like user ID and password. These endpoints are normally exposed over the network and successful exploitation can partially impact confidentiality of the application.

Affected products

14
  • SAP/Netweaver13 versions
    cpe:2.3:a:sap:netweaver:700:*:*:*:*:*:*:*+ 12 more
    • cpe:2.3:a:sap:netweaver:700:*:*:*:*:*:*:*
    • cpe:2.3:a:sap:netweaver:701:*:*:*:*:*:*:*
    • cpe:2.3:a:sap:netweaver:702:*:*:*:*:*:*:*
    • cpe:2.3:a:sap:netweaver:731:*:*:*:*:*:*:*
    • cpe:2.3:a:sap:netweaver:740:*:*:*:*:*:*:*
    • cpe:2.3:a:sap:netweaver:750:*:*:*:*:*:*:*
    • cpe:2.3:a:sap:netweaver:751:*:*:*:*:*:*:*
    • cpe:2.3:a:sap:netweaver:752:*:*:*:*:*:*:*
    • cpe:2.3:a:sap:netweaver:753:*:*:*:*:*:*:*
    • cpe:2.3:a:sap:netweaver:754:*:*:*:*:*:*:*
    • cpe:2.3:a:sap:netweaver:755:*:*:*:*:*:*:*
    • cpe:2.3:a:sap:netweaver:756:*:*:*:*:*:*:*
    • (no CPE)
  • SAP SE/SAP NetWeaver (ABAP and Java application Servers)v5
    Range: 700

Patches

Vulnerability mechanics

References

2

News mentions

0

No linked articles in our index yet.