CVE-2022-22533CWE-416

Due to improper error handling in SAP NetWeaver Application Server Java - versions KRNL64NUC 7.22, 7.22EXT, 7.49, KRNL64UC, 7.22, 7.22EXT, 7.49, 7.53, KERNEL…

published February 9, 2022

CVSS
—
EPSS
2%
Percentile
74.5
In the wild
Unconfirmed
What it is

Due to improper error handling in SAP NetWeaver Application Server Java - versions KRNL64NUC 7.22, 7.22EXT, 7.49, KRNL64UC, 7.22, 7.22EXT, 7.49, 7.53, KERNEL 7.22, 7.49, 7.53, an attacker could submit multiple HTTP server requests resulting in errors, such that it consumes the memory buffer. This could result in system shutdown rendering the system unavailable.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01524 · 74.5th percentile
Weakness
CWE-416 · Use After Free
Published
2022-02-09T22:05Z
EPSS history
Timeline
  • 09 FEB 22:05Z
    Due to improper error handling in SAP NetWeaver Application Server Java - versions KRNL64NUC 7.22, 7.22EXT, 7.49, KRNL64UC, 7.22, 7.22EXT, 7.49, 7.53, KERNEL…
    cvelistv5