Skip to content
OpenAdvisories
Unscored CVE-2022-27656 EUVD-2022-32154GHSA-jc59-rwrg-x5xh

The Web administration UI of SAP Web Dispatcher and the Internet Communication Manager (ICM) does not sufficiently encode user-controlled i…

Published May 11, 2022 · Updated Aug 3, 2024 · Assigned by sap

Vendor: SAP Product: SAP NetWeaver AS for ABAP and Java (ICM Administration UI) Product: SAP Web Dispatcher (Web Administration UI)

Description

The Web administration UI of SAP Web Dispatcher and the Internet Communication Manager (ICM) does not sufficiently encode user-controlled inputs, resulting in Cross-Site Scripting (XSS) vulnerability.

Affected products

VendorProductAffectedFixed
SAP SE SAP NetWeaver AS for ABAP and Java (ICM Administration UI) KRNL64NUC 7.22, 7.22EXT, 7.49, KRNL64 8.04, 7.22, 7.53, KERNEL 7.22, 8.04, 7.77, 7.81, 7.85, 7.86, 7.87 —
SAP SE SAP Web Dispatcher (Web Administration UI) 7.49, 7.53, 7.77, 7.81, 7.85, 7.22_EXT —

References