{"cvss":9.8,"datePublished":"2022-08-18T00:00:00Z","dateUpdated":"2022-08-18T00:00:00Z","description":"SAP NetWeaver Application Server ABAP, SAP NetWeaver Application Server Java, ABAP Platform, SAP Content Server and SAP Web Dispatcher allow HTTP request smuggling. An unauthenticated attacker can prepend a victim's request with arbitrary data, allowing for function execution impersonating the victim or poisoning intermediary Web caches.","dueDate":"2022-09-08T00:00:00Z","id":"CVE-2022-22536","kev_catalogs":["vulncheck"],"knownRansomwareCampaignUse":"Unknown","product":"Multiple Products","requiredAction":"Apply updates per vendor instructions.","severity":"CRITICAL","source":"vulncheck_kev","title":"SAP Multiple Products HTTP Request Smuggling Vulnerability","vendor":"SAP"}