| Package | Affected versions | Patched versions |
|---|---|---|
| netweaver as abap kernel | = 7.22= 7.49= 7.53= 7.77= 7.81= 7.85= 7.86= 7.87= 8.04 | |
| netweaver as abap krnl64uc | = 7.22= 7.22ext= 7.49= 7.53= 8.04 | |
| webdispatcher | = 7.22ext= 7.49= 7.53= 7.77= 7.81= 7.83= 7.85 |
The Web administration UI of SAP Web Dispatcher and the Internet Communication Manager (ICM) does not sufficiently encode user-controlled inputs, resulting in Cross-Site Scripting (XSS) vulnerability.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free