Skip links
RedRays - Your SAP Security Solution
Picture of Vahagn Vardanian

Vahagn Vardanian

Co-founder and CTO of RedRays

SAP Security on Udemy

BBPUM Cross-site scripting is possible, SAP security note 1224124

SAP Note 1224124
SAP Security Note
Medium priority

SAP security note 1224124, “BBPUM: Cross-site scripting is possible”, is a program error note released on 08.10.2009. Below are the symptom, SAP recommended solution and the affected software components.

ComponentSRM-EBP-TEC-ITS (Supplier Relationship Management > SRM > Technical Issues > ITS and Web files)
CategoryProgram error
PriorityCorrection with medium priority
TypeSAP Security Note
Version1
StatusReleased for Customer
Released on08.10.2009
LanguageEnglish

Description

Symptom

In the Internet Services "BBPUM01" ("Manage User Data") and "BBPUM02" ("Settings"), you can perform cross-site scripting using certain parameters.

Solution

Implement the following corrections or import the relevant Support Package.

Reason and prerequisites

This problem is caused by a program error.

CVSS

Score 0

Affected components

  • SRM_SERVER: 550

Full note on SAP: SAP Support Launchpad note 1224124

Detailed exploitation and proof-of-concept material for this note is maintained in the RedRays Security Platform. For access, contact [email protected].

#XSS #BBPUM #SRM #ITS

Explore More