CVE-2022-41214: Input Validation
Due to insufficient input validation, SAP NetWeaver Application Server ABAP and ABAP Platform allows an attacker with high level privileges to use a remote enabled function to delete a file which is otherwise restricted. On successful exploitation an attacker can completely compromise the integrity and availability of the application.
Affected Software
Event History
Frequently Asked Questions
What is the vulnerability ID of this SAP NetWeaver Application Server ABAP vulnerability?
The vulnerability ID of this SAP NetWeaver Application Server ABAP vulnerability is CVE-2022-41214.
What is the severity level of CVE-2022-41214?
The severity level of CVE-2022-41214 is high.
Which SAP NetWeaver Application Server ABAP versions are affected by CVE-2022-41214?
The affected versions of SAP NetWeaver Application Server ABAP are 700, 731, 740, 750, 789, and 804.
What is the impact of successfully exploiting CVE-2022-41214?
Successful exploitation of CVE-2022-41214 can completely compromise the integrity of the system.
Where can I find more information about CVE-2022-41214?
You can find more information about CVE-2022-41214 in the SAP Knowledge Base Article (SAP Note) 3256571 and the SAP security advisory.