CVE-2022-22536 SAP Multiple Products
SAP NetWeaver Application Server ABAP, SAP NetWeaver Application Server Java, ABAP Platform, SAP Content Server and SAP Web Dispatcher allow HTTP request smuggling. An unauthenticated attacker can prepend a victim's request with arbitrary data, allowing for function execution impersonating the victim or poisoning…
- CVSS
- not scored
On CISA’s exploited list
SAP Multiple Products HTTP Request Smuggling Vulnerability
- Added
- 2022-08-18
- Federal patch deadline
- 2022-09-08
- Ransomware use
- not known