CVEvulnerability

CVE-2022-28773

7.5 HIGH Published 2022-04-12 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2022-04-12
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
7.5 HIGH — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS 2.0 ([email protected])
5.0 MEDIUM — AV:N/AC:L/Au:N/C:N/I:N/A:P
Weaknesses
CWE-674

Description

Due to an uncontrolled recursion in SAP Web Dispatcher and SAP Internet Communication Manager, the application may crash, leading to denial of service, but can be restarted automatically.

Affected configurations

• sap netweaver 7.22ext • sap netweaver 7.49 • sap netweaver 7.53 • sap netweaver 7.77 • sap netweaver 7.81 • sap netweaver 7.85 • sap netweaver 7.86 • sap netweaver kernel 7.22 • sap netweaver krnl64nuc 7.22 • sap netweaver krnl64uc 7.22 • sap web dispatcher 7.53 • sap web dispatcher 7.77 • sap web dispatcher 7.81 • sap web dispatcher 7.85 • sap web dispatcher 7.86

Related

Weakness · CWE (1)

  • CWE-674 Uncontrolled Recursion weakness

References