CVE-2022-22536 — Actively Exploited: Multiple Products (SAP)
SAP NetWeaver Application Server ABAP, SAP NetWeaver Application Server Java, ABAP Platform, SAP Content Server and SAP Web Dispatcher allow HTTP request smuggling. An unauthenticated attacker can prepend a victim's request with arbitrary data, allowing for function execution impersonating the victim or poisoning inter
| CVE ID | CVE-2022-22536 |
|---|---|
| Vendor | SAP |
| Product | Multiple Products |
| Vulnerability name | SAP Multiple Products HTTP Request Smuggling Vulnerability |
| Date added | 2022-08-18 |
| Remediation due | 2022-09-08 |
| Known ransomware use | Unknown |
| Required action | Apply updates per vendor instructions. |
| Description | SAP NetWeaver Application Server ABAP, SAP NetWeaver Application Server Java, ABAP Platform, SAP Content Server and SAP Web Dispatcher allow HTTP request smuggling. An unauthenticated attacker can prepend a victim's request with arbitrary data, allowing for function execution impersonating the victim or poisoning intermediary Web caches. |
| Source | CISA Known Exploited Vulnerabilities |
🔍 Search all exploited vulnerabilities →
$1499/mo
Try ExploitWatch →