{"resultsPerPage":1,"startIndex":0,"totalResults":1,"format":"NVD_CVE","version":"2.0","timestamp":"2026-08-02T15:03:20.140","vulnerabilities":[{"cve":{"id":"CVE-2022-22534","sourceIdentifier":"cna@sap.com","published":"2022-02-09T23:15:18.533","lastModified":"2026-06-17T04:28:32.980","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Due to insufficient encoding of user input, SAP NetWeaver allows an unauthenticated attacker to inject code that may expose sensitive data like user ID and password. These endpoints are normally exposed over the network and successful exploitation can partially impact confidentiality of the application."},{"lang":"es","value":"Debido a una codificación insuficiente de la entrada del usuario, SAP NetWeaver permite a un atacante no autenticado inyectar código que puede exponer datos confidenciales como el ID de usuario y la contraseña. Estos endpoints están normalmente expuestos a través de la red y una explotación con éxito puede impactar parcialmente la confidencialidad de la aplicación"}],"affected":[{"source":"cna@sap.com","affectedData":[{"vendor":"SAP SE","product":"SAP NetWeaver (ABAP and Java application Servers)","versions":[{"version":"700","status":"affected"},{"version":"701","status":"affected"},{"version":"702","status":"affected"},{"version":"731","status":"affected"},{"version":"740","status":"affected"},{"version":"750","status":"affected"},{"version":"751","status":"affected"},{"version":"752","status":"affected"},{"version":"753","status":"affected"},{"version":"754","status":"affected"},{"version":"755","status":"affected"},{"version":"756","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","baseScore":6.1,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":2.7}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sap:netweaver:700:*:*:*:*:*:*:*","matchCriteriaId":"A7FED49E-6F9A-494A-9226-1059249960A0"},{"vulnerable":true,"criteria":"cpe:2.3:a:sap:netweaver:701:*:*:*:*:*:*:*","matchCriteriaId":"4836C36D-242F-4818-81B4-C170959D02F5"},{"vulnerable":true,"criteria":"cpe:2.3:a:sap:netweaver:702:*:*:*:*:*:*:*","matchCriteriaId":"6A503ABF-8655-40D7-96AD-2D7F19A673AE"},{"vulnerable":true,"criteria":"cpe:2.3:a:sap:netweaver:731:*:*:*:*:*:*:*","matchCriteriaId":"8A9D5C5A-6963-438B-B0EA-2A621A34D8A9"},{"vulnerable":true,"criteria":"cpe:2.3:a:sap:netweaver:740:*:*:*:*:*:*:*","matchCriteriaId":"BFFA1591-0304-4FAE-A6A7-72D04D1F41A3"},{"vulnerable":true,"criteria":"cpe:2.3:a:sap:netweaver:750:*:*:*:*:*:*:*","matchCriteriaId":"7940A9AF-308E-4CE5-BA19-7A3DCF49F644"},{"vulnerable":true,"criteria":"cpe:2.3:a:sap:netweaver:751:*:*:*:*:*:*:*","matchCriteriaId":"C09428E4-45BB-414D-9F3D-AA5C73D2DD5E"},{"vulnerable":true,"criteria":"cpe:2.3:a:sap:netweaver:752:*:*:*:*:*:*:*","matchCriteriaId":"5ED0BA7D-939D-4B05-81A3-9F991C8C04F9"},{"vulnerable":true,"criteria":"cpe:2.3:a:sap:netweaver:753:*:*:*:*:*:*:*","matchCriteriaId":"0C2BF545-A7DC-4BB6-B894-D04CF163DD88"},{"vulnerable":true,"criteria":"cpe:2.3:a:sap:netweaver:754:*:*:*:*:*:*:*","matchCriteriaId":"A75B2F18-60BE-41B5-82CB-520F794F2004"},{"vulnerable":true,"criteria":"cpe:2.3:a:sap:netweaver:755:*:*:*:*:*:*:*","matchCriteriaId":"E31620E5-30FC-4545-A430-AAA77A66B51A"},{"vulnerable":true,"criteria":"cpe:2.3:a:sap:netweaver:756:*:*:*:*:*:*:*","matchCriteriaId":"9724E131-9893-4630-96A2-EB6032D98C58"}]}]}],"references":[{"url":"https://launchpad.support.sap.com/#/notes/3124994","source":"cna@sap.com","tags":["Permissions Required"]},{"url":"https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html","source":"cna@sap.com","tags":["Vendor Advisory"]},{"url":"https://launchpad.support.sap.com/#/notes/3124994","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Permissions Required"]},{"url":"https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}}]}