Extended security enhancements to prevent XSS vulnerability, SAP security note 1268340

Description

This note contains extended security enhancements to prevent cross-site scripting vulnerability in E-Commerce solutions release 4.0.

Available fix and Supported packages

SAP-CRMICS | 4.0_640 | 4.0_640
SAP-CRMISA | 4.0_640 | 4.0_640
CRM ICSS 4.0_640 | SP015 | 000001
SAP INTERNET SALES WAC_640 | SP016 | 000000

Affected component

CVSS

Score: 0

PoC

Detailed vulnerability information added to RedRays Security Platform. Contact support@redrays.io for details.

URL

https://launchpad.support.sap.com/#/notes/1268340

TAGS

#isa
#Internet-Sales
#ECo
#E-Commerce
#E-Commerce
#WebChannel
#Web-Channel
#CRM
#ERP
#r3
#r\3
#r/3
#ECC
#b2b
#b2x
#b2c
#isauseradm
#isauseradmin
#isa-user-admin
#useradmin
#shopadmin
#shopadm
#XSS
#cross-site-scripting
#internet-security
#icss_b2b
#icss-b2b
#icss_b2c
#icss-b2c
#icss_b2x
#icss-b2x

Explore More

SAP Security Patch Day – April 2025

April 8, 2025

On April 8, 2025, SAP released its monthly Security Patch Day updates, addressing 19 new vulnerabilities across various SAP products and components.

CVE-2025-0063 SQL Injection Vulnerability in SAP NetWeaver AS for ABAP and ABAP Platform

January 14, 2025

CVSS Score: 8.8 (AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Affected Component: SAP NetWeaver AS for ABAP and ABAP Platform (Informix Database Interface) Description: A critical SQL injection

SAP Security Patch Day – January 2025 Overview

January 14, 2025

On January 14, 2025, SAP released its monthly Security Patch Day updates, addressing several vulnerabilities across various products, including SAP NetWeaver Application

How to Install the RedRays ABAP Security Plugin for Eclipse

December 23, 2024

The RedRays ABAP Security Plugin allows developers to analyze ABAP code for potential security vulnerabilities directly within Eclipse. Follow these step-by-step instructions

Vahagn Vardanian