SAP NetWeaver Information Disclosure Vulnerability
SAP · NetWeaver
Date added (CISA)
2022-06-09
Remediation due
2022-06-30
Known ransomware use
Not indicated
Remediation priority
P2 — past CISA due date
Description
The Universal Worklist Configuration in SAP NetWeaver AS JAVA 7.4 allows remote attackers to obtain sensitive user information via a crafted HTTP request.