CVE-2022-22533: SAP NetWeaver Application Server Java

High severity, CVSS 7.5. EPSS: 1.5% chance of exploitation in the next 30 days.

Due to improper error handling in SAP NetWeaver Application Server Java - versions KRNL64NUC 7.22, 7.22EXT, 7.49, KRNL64UC, 7.22, 7.22EXT, 7.49, 7.53, KERNEL 7.22, 7.49, 7.53, an attacker could submit multiple HTTP server requests resulting in errors, such that it consumes the memory buffer. This could result in system shutdown rendering the system unavailable.

Affected products

• SAP NetWeaver Application Server Java: version 7.22 only; version 7.49 only; version 7.53 only; version krnl64nuc_7.22 only; version krnl64nuc_7.22ext only; version krnl64nuc_7.49 only; …

Published 2022-02-09. Last modified 2026-06-17.