CVEvulnerability

CVE-2022-22536

10.0 CRITICAL Known exploited Published 2022-02-09 Modified 2026-06-17 Official page ↗

CISA Known Exploited Vulnerability

SAP Multiple Products HTTP Request Smuggling Vulnerability — SAP Multiple Products

SAP NetWeaver Application Server ABAP, SAP NetWeaver Application Server Java, ABAP Platform, SAP Content Server and SAP Web Dispatcher allow HTTP request smuggling. An unauthenticated attacker can prepend a victim's request with arbitrary data, allowing for function execution impersonating the victim or poisoning intermediary Web caches.

Added to KEV
2022-08-18
Remediation due
2022-09-08
Ransomware use
Unknown
Required action
Apply updates per vendor instructions.
Notes
SAP users must have an account in order to login and access the patch. https://accounts.sap.com/saml2/idp/sso; https://nvd.nist.gov/vuln/detail/CVE-2022-22536
Status
Analyzed
Published
2022-02-09
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
10.0 CRITICAL — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
CVSS 3.1 (134c704f-9b21-4f2e-91b3-4a467353bcc0)
9.8 CRITICAL — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS 2.0 ([email protected])
10.0 HIGH — AV:N/AC:L/Au:N/C:C/I:C/A:C
Weaknesses
CWE-444

Description

SAP NetWeaver Application Server ABAP, SAP NetWeaver Application Server Java, ABAP Platform, SAP Content Server 7.53 and SAP Web Dispatcher are vulnerable for request smuggling and request concatenation. An unauthenticated attacker can prepend a victim's request with arbitrary data. This way, the attacker can execute functions impersonating the victim or poison intermediary Web caches. A successful attack could result in complete compromise of Confidentiality, Integrity and Availability of the system.

Affected configurations

• sap content server 7.53 • sap netweaver application server abap 7.22 • sap netweaver application server abap 7.49 • sap netweaver application server abap 7.53 • sap netweaver application server abap 7.77 • sap netweaver application server abap 7.81 • sap netweaver application server abap 7.85 • sap netweaver application server abap 7.86 • sap netweaver application server abap 7.87 • sap netweaver application server abap 8.04 • sap netweaver application server abap krnl64nuc 7.22 • sap netweaver application server abap krnl64nuc 7.22ext • sap netweaver application server abap krnl64nuc 7.49 • sap netweaver application server abap krnl64uc 7.22 • sap netweaver application server abap krnl64uc 7.22ext • sap netweaver application server abap krnl64uc 7.49 • sap netweaver application server abap krnl64uc 7.53 • sap netweaver application server abap krnl64uc 8.04 • sap web dispatcher 7.22ext • sap web dispatcher 7.49 • sap web dispatcher 7.53 • sap web dispatcher 7.77 • sap web dispatcher 7.81 • sap web dispatcher 7.85 • sap web dispatcher 7.86 • sap web dispatcher 7.87

Related

Weakness · CWE (1)

  • CWE-444 Inconsistent Interpretation of HTTP Requests weakness

References