medium6.1
CVE-2022-27656
The Web administration UI of SAP Web Dispatcher and the Internet Communication Manager (ICM) does not sufficiently encode user-controlled inputs, resulting in …
Impact
The Web administration UI of SAP Web Dispatcher and the Internet Communication Manager (ICM) does not sufficiently encode user-controlled inputs, resulting in Cross-Site Scripting (XSS) vulnerability.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Sap | Netweaver As Abap Kernel | Versions 7.22, 7.49, 7.53, 7.77, 7.81, 7.85 |
| Sap | Netweaver As Abap Krnl64uc | Versions 7.22, 7.22ext, 7.49, 7.53, 8.04 |
| Sap | Webdispatcher | Versions 7.22ext, 7.49, 7.53, 7.77, 7.81, 7.83 |