CVE:CVE-2022-27656
CNNVD:CNNVD-202205-2734
SAP Web Dispatcher是德国思爱普（SAP）公司的Load Balancing 的核心组件，支持负载均衡，提供反向代理的功能，使得外网用户可以访问到内部应用。
SAP Web Dispatcher 和 SAP Netweaver AS for ABAP and Java (ICM)  存在跨站脚本漏洞，该漏洞源于管理 UI 中的跨站点脚本 (XSS) 漏洞。
solution:Upgrade sap netweaver_as_abap_kernel to a higher version than 7.22,7.49,7.53,7.77,7.81,7.85,7.86,7.87,8.04,and avoid the version 7.22,7.49,7.53,7.77,7.81,7.85,7.86,7.87,8.04; Upgrade sap netweaver_as_abap_krnl64uc to a higher version than 7.22,7.22ext,7.49,7.53,8.04,and avoid the version 7.22,7.22ext,7.49,7.53,8.04; Upgrade sap webdispatcher to a higher version than 7.22ext,7.49,7.53,7.77,7.81,7.83,7.85,and avoid the version 7.22ext,7.49,7.53,7.77,7.81,7.83,7.85