Exploit / PoCcriticalExploited in the wild

CISA added SAP flaw to its Known Exploited Vulnerabilities Catalog

Security Affairsby @securityaffairsAug 19, 2022 · 15:44 UTC (Aug 19, 2022)3 min read2

Read at securityaffairs.com

Analyze CVE-2022-22536 with Vani AIImpact, affected versions, exploitation, mitigations and detection

CVEs: CVE-2022-22536 CVE-2022-22532 CVE-2022-22533

Tags: cve-2022-22536 cve-2022-22532 cve-2022-22533 exploit

Vulnerabilities mentioned

All

CVE	Vulnerability	CVSS	EPSS	Signals	Published
CVE-2022-22532 +1 related CVE CVE-2022-22533	In SAP NetWeaver Application Server Java - versions KRNL64NUC 7.22, 7.22EXT, 7.49, KRNL64UC, 7.22, 7.22EXT, 7.49, 7.53, KERNEL 7.22, 7.49, 7.53, an…	9.8 group max	2%		Feb 9, 2022
CVE-2022-22536	HTTP Request Smuggling in SAP NetWeaver, Web Dispatcher and Content Server	10.0	98%	KEV	Feb 9, 2022 KEV Aug 18, 2022

From the original article

3 min read at securityaffairs.com

US CISA added a critical SAP flaw to its Known Exploited Vulnerabilities Catalog after its details were disclosed at the Black Hat and Def Con conferences.

Security Affairs

By @securityaffairs · securityaffairs.com

Read the full article at Security Affairs

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.