All vulnerabilities
CVE-2022-22536

SAP Multiple Products HTTP Request Smuggling Vulnerability

SAP Multiple ProductsApplications & CMS
Open in ThreatlineRecord JSON
CVSS
9.8Critical
ExploitationExploited in the wildAdded to KEV 18 Aug 2022CISA KEV
Exploit odds (EPSS)97.9%Chance of exploitation activity in the next 30 days, higher than 99.9% of CVEs. Scored 23 Oct 2026FIRST EPSS
Fixed inNone listedNo source names a fixed version yet
Federal deadline8 Sep 2022Remediation due date for US federal agenciesCISA KEV
CISA required actionApply updates per vendor instructions. CISA KEV

What fixes it

No source in this snapshot names a fixed version.

Timeline

  1. 9 Feb 2022, 22:05 UTCPublishedCVE List
  2. 18 Aug 2022Added to CISA KEVCISA KEV
  3. 2 Apr 2025Exploit code publicExploit-DB

Public exploit code and templates 2

  • Remote exploitSAP NetWeaver - 7.53 - HTTP Request Smuggling 2 Apr 2025Exploit-DB
  • Scanner templateSAP Memory Pipes (MPI) DesynchronizationNuclei

Listed so defenders can prioritize. Threatline links to the source and does not host exploit code.

Description

SAP NetWeaver Application Server ABAP, SAP NetWeaver Application Server Java, ABAP Platform, SAP Content Server and SAP Web Dispatcher allow HTTP request smuggling. An unauthenticated attacker can prepend a victim's request with arbitrary data, allowing for function execution impersonating the victim or poisoning intermediary Web caches.

Text from CVE List

Affected versions 22

  • SAP NetWeaver and ABAP Platformaffected: KERNEL 7.22CVE List
  • SAP NetWeaver and ABAP Platformaffected: 8.04CVE List
  • SAP NetWeaver and ABAP Platformaffected: 7.49CVE List
  • SAP NetWeaver and ABAP Platformaffected: 7.53CVE List
  • SAP NetWeaver and ABAP Platformaffected: 7.77CVE List
  • SAP NetWeaver and ABAP Platformaffected: 7.81CVE List
  • SAP NetWeaver and ABAP Platformaffected: 7.85CVE List
  • SAP NetWeaver and ABAP Platformaffected: 7.86CVE List
  • SAP NetWeaver and ABAP Platformaffected: 7.87CVE List
  • SAP NetWeaver and ABAP Platformaffected: KRNL64UC 8.04CVE List
  • SAP NetWeaver and ABAP Platformaffected: 7.22CVE List
  • SAP NetWeaver and ABAP Platformaffected: 7.22EXTCVE List
  • SAP NetWeaver and ABAP Platformaffected: KRNL64NUC 7.22CVE List
  • SAP Web Dispatcheraffected: 7.49CVE List
  • SAP Web Dispatcheraffected: 7.53CVE List
  • SAP Web Dispatcheraffected: 7.77CVE List
  • SAP Web Dispatcheraffected: 7.81CVE List
  • SAP Web Dispatcheraffected: 7.85CVE List
  • SAP Web Dispatcheraffected: 7.22EXTCVE List
  • SAP Web Dispatcheraffected: 7.86CVE List
  • SAP Web Dispatcheraffected: 7.87CVE List
  • SAP Content Serveraffected: 7.53CVE List

References 4