CVE-2022-27656 is a Cross-Site Scripting (XSS) vulnerability affecting the Web administration UI of SAP Web Dispatcher and Internet Communication Manager (ICM), specifically impacting SAP NetWeaver AS ABAP Kernel and SAP Web Dispatcher. This medium-severity vulnerability (CVSS 6.1) can be exploited remotely with low attack complexity, requiring user interaction, and could lead to limited confidentiality and integrity impacts. There is currently no evidence of active exploitation, no public exploit code (Metasploit, Nuclei, ExploitDB), and minimal community discussion or media coverage beyond a single article mentioning SAP's patching efforts.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
7.22CPE matchmatch criteria | cpe:2.3:a:sap:netweaver_as_abap_kernel:7.22:*:*:*:*:*:*:* | ||
7.49CPE matchmatch criteria | cpe:2.3:a:sap:netweaver_as_abap_kernel:7.49:*:*:*:*:*:*:* | ||
7.53CPE matchmatch criteria | cpe:2.3:a:sap:netweaver_as_abap_kernel:7.53:*:*:*:*:*:*:* | ||
7.77CPE matchmatch criteria | cpe:2.3:a:sap:netweaver_as_abap_kernel:7.77:*:*:*:*:*:*:* | ||
7.81CPE matchmatch criteria | cpe:2.3:a:sap:netweaver_as_abap_kernel:7.81:*:*:*:*:*:*:* |
CVSS version used by this source: 3.1
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.1 Bluesky, 0.0 Mastodon, and 0.1 GitHub mentions.
The average CVE in this peer group has 0.1 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.
Remediation records are not available for this CVE.