Skip links
RedRays - Your SAP Security Solution
Picture of Vahagn Vardanian

Vahagn Vardanian

Co-founder and CTO of RedRays

SAP Security on Udemy

scripts in file executes when an attachment is opened, SAP security note 1536249

SAP Note 1536249High priority

SAP security note 1536249, "scripts in file executes when an attachment is opened", is released on 14.12.2010. Below are the symptom, SAP recommended solution, references and affected software components.

ComponentSupplier Relationship Management > SRM > Cross-Application Functions > Attachments (SRM-EBP-CA-ATT)
PriorityCorrection with high priority
StatusReleased for Customer
Released on14.12.2010

Description

Symptom

When a text file containing a script is attached to a Shopping cart in SRM, opening the attachment causes the script to execute automatically in Internet Explorer. This behavior is due to a program error.

Solution

Implement the attached correction instructions or apply the corresponding support package to resolve this issue.

References

Affected components

  • SRM_SERVER (500, 550)

Full note on SAP: SAP Support Launchpad note 1536249

Detailed exploitation and proof-of-concept material for this note is maintained in the RedRays Security Platform. For access, contact [email protected].

#SRM-EBP-CA-ATT#SRM_SERVER#Attachments#Shopping Cart

Explore More