CVE-2022-27656CWE-79

CVE-2022-27656: vulnerability in SAP NetWeaver AS for ABAP and Java (ICM…

Published · Updated

Follow this CVE+ Monitor SAP Web Dispatcher+ Monitor SAP NetWeaver AS for ABAP and Java

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

3Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackepss 0.6%
The Web administration UI of SAP Web Dispatcher and the Internet Communication Manager (ICM) does not sufficiently encode user-controlled inputs, resulting in Cross-Site Scripting (XSS) vulnerability.
Affected products
SAP SE · SAP NetWeaver AS for ABAP and Java (ICM Administration UI)SAP SE · SAP Web Dispatcher (Web Administration UI)