CVE-2022-22536: SAP Multiple Products: aktif olarak istismar edilen açık

Açıklama (NVD)

SAP NetWeaver Application Server ABAP, SAP NetWeaver Application Server Java, ABAP Platform, SAP Content Server and SAP Web Dispatcher allow HTTP request smuggling. An unauthenticated attacker can prepend a victim's request with arbitrary data, allowing for function execution impersonating the victim or poisoning intermediary Web caches.

Özet bilgiler

EPSS

%97,95 (yüzdelik 100)

Yama

Yok / bilinmiyor

KEV

Eklenme: 2022-08-18 · Son tarih: 2022-09-08

Gerekli aksiyon: Apply updates per vendor instructions.

Kaynaklar

• NVD kaydı
• CISA KEV kataloğu