by Kastro
Paper/Archive/CVE-2022-22536

CVE-2022-22536

SAP SE SAP NetWeaver and ABAP Platform — SAP Multiple Products HTTP Request Smuggling Vulnerability

KEV · due 8 SepEPSS 98%public exploitSSVC actCVSS 9.8
critical.is priorityof 100
99
CVSS 9.8 (ADP)9.8 / 10 × 3029.4In CISA KEV+3030.0EPSS percentile 99.9.999 × 2020.0Exploit: SSVC active+1010.0SSVC exploitation: active+1010.0
Description · from the CVE record

SAP NetWeaver Application Server ABAP, SAP NetWeaver Application Server Java, ABAP Platform, SAP Content Server 7.53 and SAP Web Dispatcher are vulnerable for request smuggling and request concatenation. An unauthenticated attacker can prepend a victim's request with arbitrary data. This way, the attacker can execute functions impersonating the victim or poison intermediary Web caches. A successful attack could result in complete compromise of Confidentiality, Integrity and Availability of the system.

Affected

ProductAffectedFixed inSource
SAP NetWeaver and ABAP PlatformKERNEL 7.22–CNA
SAP NetWeaver and ABAP Platform8.04–CNA
SAP NetWeaver and ABAP Platform7.49–CNA
SAP NetWeaver and ABAP Platform7.53–CNA
SAP NetWeaver and ABAP Platform7.77–CNA
SAP NetWeaver and ABAP Platform7.81–CNA
SAP NetWeaver and ABAP Platform7.85–CNA
SAP NetWeaver and ABAP Platform7.86–CNA
SAP NetWeaver and ABAP Platform7.87–CNA
SAP NetWeaver and ABAP PlatformKRNL64UC 8.04–CNA
SAP NetWeaver and ABAP Platform7.22–CNA
SAP NetWeaver and ABAP Platform7.22EXT–CNA

Scores by source

CISA ADP9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CISA ADPSSVCExploitation: active · Automatable: yes · Technical impact: total

References

reflaunchpad.support.sap.com/#/notes/3123396refsap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.htmlrefcisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2022-22536kevcisa.gov/known-exploited-vulnerabilities-catalog