Skip links
RedRays - Your SAP Security Solution
Picture of Vahagn Vardanian

Vahagn Vardanian

Co-founder and CTO of RedRays

SAP Security on Udemy

SBWP Included links are displayed internally, SAP security note 1516371

SAP Note 1516371
SAP Security Note
High priority

SAP security note 1516371, "SBWP: Included links are displayed internally", is a program error note released on 14.12.2010. Below are the symptom and the SAP recommended solution.

ComponentBasis Components > Basis Services/Communication Interfaces > Communication Services: Mail, Fax, SMS, Telephony
CategoryProgram error
PriorityCorrection with high priority
TypeSAP Security Note
Version4
StatusReleased for Customer
Released on14.12.2010
LanguageEnglish

Description

Symptom

Included links to external content are not opened in an external browser window, but are displayed internally. As a result, it is not always apparent to the end user that their actions are not processed internally in the SAP system.

Solution

Implement the corrections using the Note Assistant or import the relevant Support Package.

Reason and prerequisites

Included links are displayed internally. Therefore, it is possible to display external Web pages in the internal HTML control. As a result, it may no longer be apparent to the end user whether they are working in the SAP system.

Full note on SAP: SAP Support Launchpad note 1516371

Detailed exploitation and proof-of-concept material for this note is maintained in the RedRays Security Platform. For access, contact [email protected].

#URL #cross-domain redirection #SBWP #Communication Services

Explore More