Security Note XSS vulnerability on Portal, SAP security note 1248870

Description

Possible vulnerability in the Portal.

Available fix and Supported packages

EPBC | 7.00 | 7.01
PORTAL FRAMEWORK 7.00 | SP018 | 000000
PORTAL FRAMEWORK 7.01 | SP002 | 000000
PORTAL FRAMEWORK 7.02 | SP000 | 000000
PORTAL PLATFORM 6.0_640 | SP023 | 000000

Affected component

CVSS

Score: 0

PoC

Detailed vulnerability information added to RedRays Security Platform. Contact support@redrays.io for details.

URL

https://launchpad.support.sap.com/#/notes/1248870

TAGS

#XSS
#CSS
#Security
#Cross-Site-Scripting

Explore More

SAP Security Patch Day – April 2025

April 8, 2025

On April 8, 2025, SAP released its monthly Security Patch Day updates, addressing 19 new vulnerabilities across various SAP products and components.

CVE-2025-0063 SQL Injection Vulnerability in SAP NetWeaver AS for ABAP and ABAP Platform

January 14, 2025

CVSS Score: 8.8 (AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Affected Component: SAP NetWeaver AS for ABAP and ABAP Platform (Informix Database Interface) Description: A critical SQL injection

SAP Security Patch Day – January 2025 Overview

January 14, 2025

On January 14, 2025, SAP released its monthly Security Patch Day updates, addressing several vulnerabilities across various products, including SAP NetWeaver Application

How to Install the RedRays ABAP Security Plugin for Eclipse

December 23, 2024

The RedRays ABAP Security Plugin allows developers to analyze ABAP code for potential security vulnerabilities directly within Eclipse. Follow these step-by-step instructions

Vahagn Vardanian