CVE-2022-28773CWE-674

CVE-2022-28773: vulnerability in SAP Web Dispatcher

Published · Updated

Follow this CVE+ Monitor SAP NetWeaver+ Monitor SAP Web Dispatcher

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

3Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackepss 1.5%
Due to an uncontrolled recursion in SAP Web Dispatcher and SAP Internet Communication Manager, the application may crash, leading to denial of service, but can be restarted automatically.
Affected products
SAP SE · SAP NetWeaver (Internet Communication Manager)SAP SE · SAP Web Dispatcher
Related CVEs — SAP Web Dispatcher

In the same product, most dangerous first.

CVE-2022-22536CRITICALCVE-2022-22536EPSS 97.9%KEVCVE-2021-38162HIGHCVE-2021-38162EPSS 2.7%CVE-2022-28772—CVE-2022-28772EPSS 1.4%