VULNERABILITY INTELLIGENCE
CVE-2022-28773
CVSS score7.5 HIGH
EPSS probability1.48%
CISA KEVNot currently listed
Published2022-04-12
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Description
Due to an uncontrolled recursion in SAP Web Dispatcher and SAP Internet Communication Manager, the application may crash, leading to denial of service, but can be restarted automatically.
Weakness classification
- cna@sap.com: CWE-674
- nvd@nist.gov: CWE-674
Primary references
- cna@sap.com — Permissions Required, Vendor Advisory
- cna@sap.com — Vendor Advisory
- af854a3a-2127-422b-91ae-364da2661108 — Permissions Required, Vendor Advisory
- af854a3a-2127-422b-91ae-364da2661108 — Vendor Advisory