CVE-2022-28773

HighCVSS 7.5/10Last modified Jun 17, 2026

Description

Due to an uncontrolled recursion in SAP Web Dispatcher and SAP Internet Communication Manager, the application may crash, leading to denial of service, but can be restarted automatically.

Metrics

CVSS 3.1 7.5/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Weakness enumeration

CWE-674

Affected software

No affected versions have been published.

Timeline

Published
Apr 12, 2022
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2022

CVE-2022-287745.5Under certain conditions, the SAP Host Agent logfile shows information which would otherwise be restricted.CVE-2022-287753.3Improper access control vulnerability in Samsung Flow prior to version 4.8.06.5 allows attacker to write the file without Samsung Flow permiCVE-2022-287767.8Improper access control vulnerability in Galaxy Store prior to version 4.5.36.4 allows attacker to install applications from Galaxy Store wiCVE-2022-287773.3Improper access control vulnerability in Samsung Members prior to version 13.6.08.5 allows local attacker to execute call function without CCVE-2022-287783.3Improper access control vulnerability in Samsung Security Supporter prior to version 1.2.40.0 allows attacker to set the arbitrary folder asCVE-2022-287797.8Uncontrolled search path element vulnerability in Samsung Android USB Driver windows installer program prior to version 1.7.50 allows attackCVE-2022-287805.5Improper access control vulnerability in Weather prior to SMR May-2022 Release 1 allows that attackers can access location information that CVE-2022-287816.7Improper input validation in Settings prior to SMR-May-2022 Release 1 allows attackers to launch arbitrary activity with system privilege. TCVE-2022-287824.6Improper access control vulnerability in Contents To Window prior to SMR May-2022 Release 1 allows physical attacker to install package befoCVE-2022-287837.1Improper validation of removing package name in Galaxy Themes prior to SMR May-2022 Release 1 allows attackers to uninstall arbitrary packagCVE-2022-287843.3Path traversal vulnerability in Galaxy Themes prior to SMR May-2022 Release 1 allows attackers to list file names in arbitrary directory as CVE-2022-287855.5Improper buffer size check logic in aviextractor library prior to SMR May-2022 Release 1 allows out of bounds read leading to possible tempo
CVE-2022-28773: High severity, CVSS 7.5 | Vulnix