SAP NetWeaver Application Server Java vulnerabilities

2 known vulnerabilities in SAP NetWeaver Application Server Java from SAP. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.5 High severity

  SAP NetWeaver Application Server Java: Use After Free

  CVE-2022-22533Feb 9, 2022SAPEPSS 1.52%

  Due to improper error handling in SAP NetWeaver Application Server Java - versions KRNL64NUC 7.22, 7.22EXT, 7.49, KRNL64UC, 7.22, 7.22EXT, 7.49, 7.53, KERNEL 7.22, 7.49, 7.53, an attacker could submit multiple HTTP server requests resulting in errors, such tha

• 9.8 Critical severity

  SAP NetWeaver Application Server Java: Inconsistent Interpretation of HTTP Requests

  CVE-2022-22532Feb 9, 2022SAPEPSS 2.06%

  In SAP NetWeaver Application Server Java - versions KRNL64NUC 7.22, 7.22EXT, 7.49, KRNL64UC, 7.22, 7.22EXT, 7.49, 7.53, KERNEL 7.22, 7.49, 7.53, an unauthenticated attacker could submit a crafted HTTP server request which triggers improper shared memory buffer