VYPR
← All advisories
Medium severity6.1NVD Advisory· Published May 11, 2022· Updated Jun 17, 2026

CVE-2022-27656

CVE-2022-27656

Description

The Web administration UI of SAP Web Dispatcher and the Internet Communication Manager (ICM) does not sufficiently encode user-controlled inputs, resulting in Cross-Site Scripting (XSS) vulnerability.

Affected products

25
  • SAP/Netweaver As Abap Kernel9 versions
    cpe:2.3:a:sap:netweaver_as_abap_kernel:7.22:*:*:*:*:*:*:*+ 8 more
    • cpe:2.3:a:sap:netweaver_as_abap_kernel:7.22:*:*:*:*:*:*:*
    • cpe:2.3:a:sap:netweaver_as_abap_kernel:7.49:*:*:*:*:*:*:*
    • cpe:2.3:a:sap:netweaver_as_abap_kernel:7.53:*:*:*:*:*:*:*
    • cpe:2.3:a:sap:netweaver_as_abap_kernel:7.77:*:*:*:*:*:*:*
    • cpe:2.3:a:sap:netweaver_as_abap_kernel:7.81:*:*:*:*:*:*:*
    • cpe:2.3:a:sap:netweaver_as_abap_kernel:7.85:*:*:*:*:*:*:*
    • cpe:2.3:a:sap:netweaver_as_abap_kernel:7.86:*:*:*:*:*:*:*
    • cpe:2.3:a:sap:netweaver_as_abap_kernel:7.87:*:*:*:*:*:*:*
    • cpe:2.3:a:sap:netweaver_as_abap_kernel:8.04:*:*:*:*:*:*:*
  • SAP/Netweaver As Abap Krnl64uc5 versions
    cpe:2.3:a:sap:netweaver_as_abap_krnl64uc:7.22:*:*:*:*:*:*:*+ 4 more
    • cpe:2.3:a:sap:netweaver_as_abap_krnl64uc:7.22:*:*:*:*:*:*:*
    • cpe:2.3:a:sap:netweaver_as_abap_krnl64uc:7.22ext:*:*:*:*:*:*:*
    • cpe:2.3:a:sap:netweaver_as_abap_krnl64uc:7.49:*:*:*:*:*:*:*
    • cpe:2.3:a:sap:netweaver_as_abap_krnl64uc:7.53:*:*:*:*:*:*:*
    • cpe:2.3:a:sap:netweaver_as_abap_krnl64uc:8.04:*:*:*:*:*:*:*
  • SAP/Webdispatcher7 versions
    cpe:2.3:a:sap:webdispatcher:7.22ext:*:*:*:*:*:*:*+ 6 more
    • cpe:2.3:a:sap:webdispatcher:7.22ext:*:*:*:*:*:*:*
    • cpe:2.3:a:sap:webdispatcher:7.49:*:*:*:*:*:*:*
    • cpe:2.3:a:sap:webdispatcher:7.53:*:*:*:*:*:*:*
    • cpe:2.3:a:sap:webdispatcher:7.77:*:*:*:*:*:*:*
    • cpe:2.3:a:sap:webdispatcher:7.81:*:*:*:*:*:*:*
    • cpe:2.3:a:sap:webdispatcher:7.83:*:*:*:*:*:*:*
    • cpe:2.3:a:sap:webdispatcher:7.85:*:*:*:*:*:*:*
  • SAP/Internet Communication Managerllm-fuzzy
  • SAP/Web Dispatcherllm-fuzzy
  • SAP SE/SAP NetWeaver AS for ABAP and Java (ICM Administration UI)v5
    Range: KRNL64NUC 7.22
  • SAP SE/SAP Web Dispatcher (Web Administration UI)v5
    Range: 7.49

Patches

Vulnerability mechanics

References

2

News mentions

0

No linked articles in our index yet.