CVE-2022-28773

Published: Apr 12, 2022Modified: Feb 25, 2026

7.5

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Exploitability: 3.9 / Impact: 3.6

Source: NVD

Description

Due to an uncontrolled recursion in SAP Web Dispatcher and SAP Internet Communication Manager, the application may crash, leading to denial of service, but can be restarted automatically.

Affected (15)

Products: Sap: Netweaver, Web Dispatcher

Sap

2 products

Netweaver

Web Dispatcher

Configuration A

15 vulnerable

Vulnerable Software	Affected Versions
Sap Netweaver	Version 7.22ext
Sap Netweaver	Version 7.49
Sap Netweaver	Version 7.53
Sap Netweaver	Version 7.77
Sap Netweaver	Version 7.81
Sap Netweaver	Version 7.85
Sap Netweaver	Version 7.86
Sap Netweaver	Version kernel_7.22
Sap Netweaver	Version krnl64nuc_7.22
Sap Netweaver	Version krnl64uc_7.22
Sap Web Dispatcher	Version 7.53
Sap Web Dispatcher	Version 7.77
Sap Web Dispatcher	Version 7.81
Sap Web Dispatcher	Version 7.85
Sap Web Dispatcher	Version 7.86