CVE-2022-27656
11.05.2022, 15:15
The Web administration UI of SAP Web Dispatcher and the Internet Communication Manager (ICM) does not sufficiently encode user-controlled inputs, resulting in Cross-Site Scripting (XSS) vulnerability.
| Vendor | Product | Version |
|---|---|---|
| sap | netweaver_as_abap_kernel | 7.22 |
| sap | netweaver_as_abap_kernel | 7.49 |
| sap | netweaver_as_abap_kernel | 7.53 |
| sap | netweaver_as_abap_kernel | 7.77 |
| sap | netweaver_as_abap_kernel | 7.81 |
| sap | netweaver_as_abap_kernel | 7.85 |
| sap | netweaver_as_abap_kernel | 7.86 |
| sap | netweaver_as_abap_kernel | 7.87 |
| sap | netweaver_as_abap_kernel | 8.04 |
| sap | netweaver_as_abap_krnl64uc | 7.22 |
| sap | netweaver_as_abap_krnl64uc | 7.22ext:ext |
| sap | netweaver_as_abap_krnl64uc | 7.49 |
| sap | netweaver_as_abap_krnl64uc | 7.53 |
| sap | netweaver_as_abap_krnl64uc | 8.04 |
| sap | webdispatcher | 7.22ext:ext |
| sap | webdispatcher | 7.49 |
| sap | webdispatcher | 7.53 |
| sap | webdispatcher | 7.77 |
| sap | webdispatcher | 7.81 |
| sap | webdispatcher | 7.83 |
| sap | webdispatcher | 7.85 |
𝑥
= Vulnerable software versions