CVE-2022-29615

Name of the Vulnerable Software and Affected Versions SAP NetWeaver Developer Studio version 7.50

Description The issue is related to the logging framework log4j in version 1.x, which is part of Eclipse and used by SAP NetWeaver Developer Studio. This could have a low impact on the application's confidentiality and integrity due to the vulnerabilities associated with log4j version 1.x.

Recommendations For SAP NetWeaver Developer Studio version 7.50, consider updating the log4j component to a version that is not affected by the vulnerabilities. As a temporary workaround, restrict the use of the log4j logging framework until a patch is available.