---
id: "CVE-2022-22536"
kind: "vulnerability"
aliases: ["CVE-2022-22536"]
title: "SAP NetWeaver Application Server ABAP, SAP NetWeaver Application Server Java, ABAP Platform, SAP Content Server 7.53\u2026"
severity: "critical"
cvss: 10.0
epss: 0.97945
exploited: true
status: "open"
category: "vendor"
products: [{"name": "SAP Multiple Products", "fixed": [], "affected": "", "ecosystem": "vendor"}, {"name": "sap content server", "fixed": [], "affected": "= 7.53", "ecosystem": "vendor"}, {"name": "sap netweaver application server abap", "fixed": [], "affected": "= 7.22", "ecosystem": "vendor"}, {"name": "sap netweaver application server abap", "fixed": [], "affected": "= 7.49", "ecosystem": "vendor"}, {"name": "sap netweaver application server abap", "fixed": [], "affected": "= 7.53", "ecosystem": "vendor"}, {"name": "sap netweaver application server abap", "fixed": [], "affected": "= 7.77", "ecosystem": "vendor"}, {"name": "sap netweaver application server abap", "fixed": [], "affected": "= 7.81", "ecosystem": "vendor"}, {"name": "sap netweaver application server abap", "fixed": [], "affected": "= 7.85", "ecosystem": "vendor"}, {"name": "sap netweaver application server abap", "fixed": [], "affected": "= 7.86", "ecosystem": "vendor"}, {"name": "sap netweaver application server abap", "fixed": [], "affected": "= 7.87", "ecosystem": "vendor"}, {"name": "sap netweaver application server abap", "fixed": [], "affected": "= 8.04", "ecosystem": "vendor"}, {"name": "sap netweaver application server abap", "fixed": [], "affected": "= krnl64nuc_7.22", "ecosystem": "vendor"}, {"name": "sap netweaver application server abap", "fixed": [], "affected": "= krnl64nuc_7.22ext", "ecosystem": "vendor"}, {"name": "sap netweaver application server abap", "fixed": [], "affected": "= krnl64nuc_7.49", "ecosystem": "vendor"}, {"name": "sap netweaver application server abap", "fixed": [], "affected": "= krnl64uc_7.22", "ecosystem": "vendor"}, {"name": "sap netweaver application server abap", "fixed": [], "affected": "= krnl64uc_7.22ext", "ecosystem": "vendor"}, {"name": "sap netweaver application server abap", "fixed": [], "affected": "= krnl64uc_7.49", "ecosystem": "vendor"}, {"name": "sap netweaver application server abap", "fixed": [], "affected": "= krnl64uc_7.53", "ecosystem": "vendor"}, {"name": "sap netweaver application server abap", "fixed": [], "affected": "= krnl64uc_8.04", "ecosystem": "vendor"}, {"name": "sap web dispatcher", "fixed": [], "affected": "= 7.22ext", "ecosystem": "vendor"}, {"name": "sap web dispatcher", "fixed": [], "affected": "= 7.49", "ecosystem": "vendor"}, {"name": "sap web dispatcher", "fixed": [], "affected": "= 7.53", "ecosystem": "vendor"}, {"name": "sap web dispatcher", "fixed": [], "affected": "= 7.77", "ecosystem": "vendor"}, {"name": "sap web dispatcher", "fixed": [], "affected": "= 7.81", "ecosystem": "vendor"}, {"name": "sap web dispatcher", "fixed": [], "affected": "= 7.85", "ecosystem": "vendor"}, {"name": "sap web dispatcher", "fixed": [], "affected": "= 7.86", "ecosystem": "vendor"}, {"name": "sap web dispatcher", "fixed": [], "affected": "= 7.87", "ecosystem": "vendor"}]
ecosystems: ["vendor"]
tags: ["abap", "exploited", "netweaver", "sap", "vendor", "web-dispatcher"]
not_affected_if: ["unknown"]
published_at: "2022-02-09T23:15:18+00:00"
first_seen_at: "2026-10-23T19:11:52+00:00"
updated_at: "2026-10-23T22:29:04+00:00"
sources: [{"source": "kev", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2022-22536", "first_seen_at": "2026-10-23T19:11:52+00:00"}, {"source": "epss", "url": "https://api.first.org/data/v1/epss?cve=CVE-2022-22536", "first_seen_at": "2026-10-23T19:13:45+00:00"}, {"source": "nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-22536", "first_seen_at": "2026-10-23T22:29:04+00:00"}]
---

# SAP NetWeaver Application Server ABAP, SAP NetWeaver Application Server Java, ABAP Platform, SAP Content Server 7.53…

SAP NetWeaver, ABAP Platform, SAP Content Server and SAP Web Dispatcher can be tricked into HTTP request smuggling. An unauthenticated attacker can prepend arbitrary data to a victim's request, executing functions as the victim or poisoning intermediary web caches.

_Summary, check and fix written by a model from the sources; labelled as such._

## Affected

- vendor:SAP Multiple Products affected ? fixed ?
- vendor:sap content server affected = 7.53 fixed ?
- vendor:sap netweaver application server abap affected = 7.22 fixed ?
- vendor:sap netweaver application server abap affected = 7.49 fixed ?
- vendor:sap netweaver application server abap affected = 7.53 fixed ?
- vendor:sap netweaver application server abap affected = 7.77 fixed ?
- vendor:sap netweaver application server abap affected = 7.81 fixed ?
- vendor:sap netweaver application server abap affected = 7.85 fixed ?
- vendor:sap netweaver application server abap affected = 7.86 fixed ?
- vendor:sap netweaver application server abap affected = 7.87 fixed ?
- vendor:sap netweaver application server abap affected = 8.04 fixed ?
- vendor:sap netweaver application server abap affected = krnl64nuc_7.22 fixed ?
- vendor:sap netweaver application server abap affected = krnl64nuc_7.22ext fixed ?
- vendor:sap netweaver application server abap affected = krnl64nuc_7.49 fixed ?
- vendor:sap netweaver application server abap affected = krnl64uc_7.22 fixed ?
- vendor:sap netweaver application server abap affected = krnl64uc_7.22ext fixed ?
- vendor:sap netweaver application server abap affected = krnl64uc_7.49 fixed ?
- vendor:sap netweaver application server abap affected = krnl64uc_7.53 fixed ?
- vendor:sap netweaver application server abap affected = krnl64uc_8.04 fixed ?
- vendor:sap web dispatcher affected = 7.22ext fixed ?
- vendor:sap web dispatcher affected = 7.49 fixed ?
- vendor:sap web dispatcher affected = 7.53 fixed ?
- vendor:sap web dispatcher affected = 7.77 fixed ?
- vendor:sap web dispatcher affected = 7.81 fixed ?
- vendor:sap web dispatcher affected = 7.85 fixed ?
- vendor:sap web dispatcher affected = 7.86 fixed ?
- vendor:sap web dispatcher affected = 7.87 fixed ?

## Fix

Apply the SAP security note and update per vendor instructions; the specific note number and patched versions are not in the sources.

## Timeline

- 2026-10-23T19:11:52+00:00 kev https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2022-22536
- 2026-10-23T19:13:45+00:00 epss https://api.first.org/data/v1/epss?cve=CVE-2022-22536
- 2026-10-23T22:29:04+00:00 nvd https://nvd.nist.gov/vuln/detail/CVE-2022-22536

## From the sources

SAP NetWeaver Application Server ABAP, SAP NetWeaver Application Server Java, ABAP Platform, SAP Content Server 7.53 and SAP Web Dispatcher are vulnerable for request smuggling and request concatenation. An unauthenticated attacker can prepend a victim's request with arbitrary data. This way, the attacker can execute functions impersonating the victim or poison intermediary Web caches. A successful attack could result in complete compromise of Confidentiality, Integrity and Availability of the system.

---

_Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai_