CVE-2022-41214: Input Validation
First published: Tue Nov 08 2022(Updated: )
Due to insufficient input validation, SAP NetWeaver Application Server ABAP and ABAP Platform allows an attacker with high level privileges to use a remote enabled function to delete a file which is otherwise restricted. On successful exploitation an attacker can completely compromise the integrity and availability of the application.
Credit: cna@sap.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| SAP NetWeaver Application Server ABAP | =700 | |
| SAP NetWeaver Application Server ABAP | =731 | |
| SAP NetWeaver Application Server ABAP | =740 | |
| SAP NetWeaver Application Server ABAP | =750 | |
| SAP NetWeaver Application Server ABAP | =789 | |
| SAP NetWeaver Application Server ABAP | =804 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the vulnerability ID of this SAP NetWeaver Application Server ABAP vulnerability?
The vulnerability ID of this SAP NetWeaver Application Server ABAP vulnerability is CVE-2022-41214.
What is the severity level of CVE-2022-41214?
The severity level of CVE-2022-41214 is high.
Which SAP NetWeaver Application Server ABAP versions are affected by CVE-2022-41214?
The affected versions of SAP NetWeaver Application Server ABAP are 700, 731, 740, 750, 789, and 804.
What is the impact of successfully exploiting CVE-2022-41214?
Successful exploitation of CVE-2022-41214 can completely compromise the integrity of the system.
Where can I find more information about CVE-2022-41214?
You can find more information about CVE-2022-41214 in the SAP Knowledge Base Article (SAP Note) 3256571 and the SAP security advisory.
- collector/nvd-index
- agent/weakness
- agent/references
- agent/severity
- agent/author
- agent/type
- agent/event
- agent/description
- agent/last-modified-date
- agent/first-publish-date
- agent/softwarecombine
- agent/tags
- collector/mitre-cve
- source/MITRE
- vendor/sap
- canonical/sap netweaver application server abap
- version/sap netweaver application server abap/700
- version/sap netweaver application server abap/731
- version/sap netweaver application server abap/740
- version/sap netweaver application server abap/750
- version/sap netweaver application server abap/789
- version/sap netweaver application server abap/804