Description
a) A malicious user may be able to execute any source code.
b) A malicious user could modify displayed application content without authorization, save the modified data, and potentially obtain authentication information from other legitimate users.
Available fix and Supported packages
- SAP_BASIS | 710 | 730
- SAP_ABA | 640 | 640
- SAP_ABA | 700 | 702
- ABA_PLUS | 100 | 100
- SAP_BASIS 710 | SAPKB71011 |
- SAP_BASIS 711 | SAPKB71106 |
- SAP_BASIS 720 | SAPKB72004 |
- SAP_BASIS 730 | SAPKB73001 |
- SAP_ABA 702 | SAPKA70205 |
- SAP_ABA 640 | SAPKA64027 |
- SAP_ABA 700 | SAPKA70023 |
- SAP_ABA 701 | SAPKA70108 |
- ABA_PLUS 100 | SAPKGPBA22 |
Affected component
- BC-SRV-BRF
Business Rule Framework (For BRF+, use BC-SRV-BR)
CVSS
Score: 0
PoC
Detailed vulnerability information added to RedRays Security Platform. Contact [email protected] for details.
URL
https://launchpad.support.sap.com/#/notes/1496919
