SAP HANA XSA Web Dispatcher has insufficient request validation in certain administrative functions. An unauthenticated attacker can trick a logged-on administrator into clicking a malicious link, causing unintended actions within the administrator's session. This can temporarily compromise the SAP HANA XSA Web Dispatcher, impacting confidentiality highly and integrity and availability partially.