CVE-2022-41272

CVE-2022-41272 is a critical vulnerability affecting SAP NetWeaver Process Integration (PI) version 7.50, allowing an unauthenticated attacker to exploit an open JNDI interface in the User Defined Search (UDS). This enables full read access to user data, limited data modification, and system performance degradation, resulting in high confidentiality impact and limited integrity/availability impact. With a CVSS score of 8.6 (High), it requires no user interaction and is network-exploitable with low attack complexity. While there is no known active exploitation or public exploit code, the vulnerability has garnered significant community discussion, indicating awareness and potential future exploitation.