CVE-2022-41214: sap_se sap netweaver application server abap and abap platform Improper Input Validation
Vulnerability summary
CVE-2022-41214 is a high (CVSS 8.7) Improper Input Validation vulnerability in sap_se sap netweaver application server abap and abap platform. EPSS estimates a 0.82% chance of exploitation in the next 30 days, higher than 56.8% of scored vulnerabilities.
Timeline
- 08-11-2022PublishedVulnerability first disclosed.
- 01-05-2025Last modifiedVulnerability information updated.
Description
Due to insufficient input validation, SAP NetWeaver Application Server ABAP and ABAP Platform allows an attacker with high level privileges to use a remote enabled function to delete a file which is otherwise restricted. On successful exploitation an attacker can completely compromise the integrity and availability of the application.
CVSS metrics
2 scores · 2 sources · 1 version- NVDNIST8.7HighCVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:N/I:H/A:H
EPSS trend
Probability
0.82%
Chance of exploitation in the next 30 days
Percentile
57%
Versus all other CVEs
30-day change
+0.02 pp
From 0.80% on 21-09-2026
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeAffected systems
Sap1 product
- netweaver_application_server_abap700 | 731 | 740 | 750 | 789 | 8.04
Sap_se1 product
- sap netweaver application server abap and abap platform= 700 | = 731 | = 804 | = 740 | = 750 | = 789
2 vendors · 2 products