CVE-2022-22540

CVE-2022-22540

Vendor Sap Se
Product SAP NetWeaver AS ABAP (Workplace Server)
Weakness CWE-89 · SQLi
Published February 9, 2022
Last update August 3, 2024

CVSS base score

What the vulnerability does

01Description

SAP NetWeaver AS ABAP (Workplace Server) - versions 700, 701, 702, 731, 740, 750, 751, 752, 753, 754, 755, 756, 787, allows an attacker to execute crafted database queries, that could expose the backend database. Successful attacks could result in disclosure of a table of contents from the system, but no risk of modification possible.

Key dates

02Disclosure timeline

February 9, 2022 CVE published
August 3, 2024 Record updated