References https://nvd.nist.gov/vuln/detail/CVE-2022-27656 https://www.cve.org/CVERecord?id=CVE-2022-27656 https://userapps.support.sap.com/sap/support/knowledge/en/3195635 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-27656 https://www.cvedetails.com/cve/CVE-2022-27656/ https://onapsis.com/security-advisories/stored-xss-in-administration-ui-of-sap/ https://www.redpacketsecurity.com/sap-web-dispatcher-and-sap-netweaver-as-for-abap-and-java-cross-site-scripting-cve-2022-27656/ https://securitybridge.com/blog/sap-security-patch-day-may-2022-2/ https://euvd.enisa.europa.eu/vulnerability/CVE-2022-27656 https://cloud.securitybridge.com/advisory/detail/3145046
Related Vulnerabilities用友U8Cloud /ServiceDispatcherServlet 文件上传漏洞用友 U8 Cloud /ServiceDispatcherServlet IFileTrans 文件上传漏洞用友 U8 Cloud /ServiceDispatcherServlet IPFxxFileService 文件上传漏洞关于U8cloud所有版本存在ServiceDispatcherServlet反序列化补丁绕过实现文件上传漏洞的安全公告PoCCVE-2016-0957: Adobe AEM Dispatcher <4.15 - Rules BypassPoCyonyou-nc-dispatcher-fileupload: Yonyou NC ServiceDispatcher Servlet - Arbitrary File UploadPoCaem-dispatcher-bypass: Adobe Experience Manager - Dispatcher Bypass用友u8-cloud ServiceDispatcherServlet 存在反序列化漏洞关于U8cloud所有版本ServiceDispatcher接口存在反序列化漏洞的安全公告用友 BIP ServiceDispatcher 接口远程代码执行漏洞