CVE-2022-32215

mediumpriority · attend · 51EPSS 0.702 · 99 %ileDEEUUS

grimoire priorityP1 · Urgent

Exploitable?

—

no known exploitation

Likely / severe?

70.2% (99th) EPSS

CVSS 6.5 · medium

Is it mine?

145 products

Check your exposure

Who says so?

7 sources

cnnvd · enisa_euvd · osv · cert_bund

EPSS · scored 2026-10-27

The llhttp parser <v14.20.1, <v16.17.1 and <v18.9.1 in the http module in Node.js does not correctly handle multi-line Transfer-Encoding headers. This can lead to HTTP Request Smuggling (HRS).

remediations

Vendor fix, mitigation, or workaround guidance, as published by each source.

A vendor fix is available.

Fixedfesto_psirt
FactoryViews (non-Lite): Upgrade to FactoryViews 1.6.0. See the upgrade guide for information on how to upgrade. FactoryViews Lite: Upgrade to FactoryViews 1.7.0. See the upgrade guide for information on how to upgrade.
FixedSINEC INSsiemens_psirt
Update to V1.0 SP2 Update 1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109815432/
FixedSINEC INScisa_csaf_ot
Update to V1.0 SP2 Update 1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109815432/

cvss

Technical severity, 0–10. One row per scoring source.

6.5

010

base score 0–10 · higher = more severe · hover a vector to decode

v3.16.5mediumCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:Nprimary · NVD / NIST USexploitability 3.9 · impact 2.5

v3.16.5mediumCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N/E:P/RL:O/RC:Csecondary · CISA US

v3.16.5mediumCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N/E:P/RL:O/RC:Csecondary · Siemens ProductCERT DE

v3.16.5mediumCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:Nsecondary · Festo PSIRT DE

v3.16.5mediumCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N/E:Hsecondary · CVSS-BT (t0sche)

weaknesses

The CWE weakness classes this flaw belongs to.

CWE-444USprimaryCWE-444USCWE-444USCWE-444US

affected products (145)

Products and version ranges known to be affected.

Amazon Corretto <11.0.17.8.1all versionscert_bundDE
Amazon Corretto <11.0.26.4.1all versionscert_bundDE
Amazon Corretto <8.352.08.1all versionscert_bundDE
Amazon Corretto <8.442.06.1all versionscert_bundDE
Amazon Linux 2all versionscert_bundDEcpe:/o:amazon:linux_2:-
Broadcom Brocade SANnav <2.3.0aall versionscert_bundDE
Broadcom Brocade SANnav <2.3.1aall versionscert_bundDE
Debian Linuxall versionscert_bundDEcpe:/o:debian:debian_linux:-
Dell NetWorker nre <8.0.15all versionscert_bundDE
Gentoo Linuxall versionscert_bundDEcpe:/o:gentoo:linux:-
HCL BigFix <10.0.12.0all versionscert_bundDE
Hitachi Command Suiteall versionscert_bundDEcpe:/a:hitachi:command_suite:-
Hitachi Configuration Managerall versionscert_bundDEcpe:/a:hitachi:configuration_manager:-
Hitachi Ops Centerall versionscert_bundDEcpe:/a:hitachi:ops_center:-
IBM AIX 7.1all versionscert_bundDEcpe:/o:ibm:aix:7.1
IBM AIX 7.2all versionscert_bundDEcpe:/o:ibm:aix:7.2
IBM AIX 7.3all versionscert_bundDEcpe:/o:ibm:aix:7.3
IBM Business Automation Workflow 19.0.0.3-22.0.1all versionscert_bundDEcpe:/a:ibm:business_automation_workflow:19.0.0.3_-_22.0.1
IBM Content Manager 5.5.4.0all versionscert_bundDEcpe:/a:ibm:content_manager:5.5.4.0
IBM Content Manager 5.5.8.0all versionscert_bundDEcpe:/a:ibm:content_manager:5.5.8.0

showing 20 of 145

advisories (10)

Vendor and ecosystem advisories describing this.

FSA-202302Festo: Several vulnerabilities in FactoryViews2023-07-10csaf · festo_psirtDE
FactoryViews bundles many third-party applications which are used in background processes to provide the software's features. From time to time, vulnerabilities in these bundled applications are discovered. These are typically fixed in newer versions of FactoryViews by updating the bundled applications. FactoryViews versions up to and including 1.5.2 contain around 200 such vulnerabilities listed in this advisory.Version 1.6.0 is a security rollup release which includes updates to all bundled applications and fixes these vulnerabilities. At this time, FactoryViews Lite cannot be updated beyond version 1.1. FactoryViews 1.7 unifies the non-Lite and Lite versions and fixes these vulnerabilities for users of FactoryViews Lite.
SSA-332410SSA-332410: Multiple Vulnerabilities in SINEC INS before V1.0 SP2 Update 12023-01-10csaf · siemens_psirtDE
Siemens has released a new version for SINEC INS that fixes multiple vulnerabilities that could allow an attacker to read and write arbitrary files from the file system of the affected component and to ultimately execute arbitrary code on the device. In addition, this version also contains fixes for multiple vulnerabilities in underlying third party components. Siemens has released an update for SINEC INS and recommends to update to the latest version.
WID-SEC-W-2022-0621Node.js: Mehrere Schwachstellen ermöglichen CodeausführungDeutsch2022-07-07csaf · cert_bundDE
Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Node.js ausnutzen, um beliebigen Programmcode auszuführen, um Konfigurationen zu manipulieren und um Sicherheitsmechanismen zu umgehen.
WID-SEC-W-2022-1375JFrog Artifactory: Mehrere SchwachstellenDeutsch2022-09-11csaf · cert_bundDE
Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in JFrog Artifactory ausnutzen, um seine Privilegien zu erweitern, beliebigen Code auszuführen, Sicherheitsmaßnahmen zu umgehen, vertrauliche Informationen offenzulegen und einen Denial-of-Service-Zustand auszulösen.
WID-SEC-W-2022-1461IBM Spectrum Protect: Mehrere SchwachstellenDeutsch2022-09-18csaf · cert_bundDE
Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in IBM Spectrum Protect ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode mit Administratorrechten auszuführen, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuführen, einen Denial of Service Zustand herbeizuführen oder Sicherheitsvorkehrungen zu umgehen.
WID-SEC-W-2022-1789Oracle Java SE: Mehrere SchwachstellenDeutsch2022-10-18csaf · cert_bundDE
Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Oracle Java SE ausnutzen, um die Vertraulichkeit, Integrität und Verfügbarkeit zu gefährden.
WID-SEC-W-2023-0561Xerox FreeFlow Print Server: Mehrere SchwachstellenDeutsch2023-03-02csaf · cert_bundDE
Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Xerox FreeFlow Print Server ausnutzen, um die Vertraulichkeit, Verfügbarkeit und Integrität des Systems zu gefährden.
ICSA-23-017-03Siemens SINEC INS2023-01-10icsa · cisa_csaf_otUS
Siemens has released a new version for SINEC INS that fixes multiple vulnerabilities that could allow an attacker to read and write arbitrary files from the file system of the affected component and to ultimately execute arbitrary code on the device. In addition, this version also contains fixes for multiple vulnerabilities in underlying third party components. Siemens has released an update for SINEC INS and recommends to update to the latest version.
BIT-node-2022-322152024-03-06vendor · osvUS
The llhttp parser <v14.20.1, <v16.17.1 and <v18.9.1 in the http module in Node.js does not correctly handle multi-line Transfer-Encoding headers. This can lead to HTTP Request Smuggling (HRS).
BIT-node-min-2022-322152024-12-16vendor · osvUS
The llhttp parser <v14.20.1, <v16.17.1 and <v18.9.1 in the http module in Node.js does not correctly handle multi-line Transfer-Encoding headers. This can lead to HTTP Request Smuggling (HRS).

also known as (5)

Other names and identifiers for this entity.

sources

Which sources assert this record, and when.

cnnvd enisa_euvd osv cert_bund festo_psirt siemens_psirt cisa_csaf_ot NVD CVE.org MITRE

published 2022-07-14modified 2026-06-17

related (553)

Related entries.

ID	severity	EPSS	exploitable	published
CVE-2026-48710US	medium6.5OT critical	70.3% (99th)	KEV	2026-05-26
Starlette is a lightweight ASGI framework/toolkit. Prior to version 1.0.1, the HTTP `Host` request header was not validated before being used to reconstruct `request.url`. Because…
CVE-2025-61884US	—OT critical	95.9% (100th)	KEV	2025-10-12
Vulnerability in the Oracle Configurator product of Oracle E-Business Suite (component: Runtime UI). Supported versions that are affected are 12.2.3-12.2.14. Easily exploitable vu…
CVE-2023-48365US	critical9.9OT critical	47.7% (99th)	KEV	2023-11-15
Qlik Sense Enterprise for Windows before August 2023 Patch 2 allows unauthenticated remote code execution, aka QB-21683. Due to improper validation of HTTP headers, a remote attack…
CVE-2023-41265US	critical9.9OT critical	88.2% (100th)	KEV	2023-08-29
An HTTP Request Tunneling vulnerability found in Qlik Sense Enterprise for Windows for versions May 2023 Patch 3 and earlier, February 2023 Patch 7 and earlier, November 2022 Patch…
CVE-2022-22536US	critical10.0OT critical	97.9% (100th)	KEV	2022-02-09
SAP NetWeaver Application Server ABAP, SAP NetWeaver Application Server Java, ABAP Platform, SAP Content Server 7.53 and SAP Web Dispatcher are vulnerable for request smuggling and…

+548 more

references (42)

External citations — patches, advisories, analysis.

scry

Attackers weaponise vulnerabilities like this against internet-exposed services. See what is exposed on your perimeter with a free passive scan.

Free scan