Update 2 to Security Note 1723641, SAP security note 1756472

SAP security note 1756472, "Update 2 to Security Note 1723641". Below are the symptom, SAP recommended solution and the affected software components.

Description

Symptom

This SAP Note supplements the corrections provided in security note 1723641. Additional corrections are available with the following Support Package Patch Levels:

• MESSAGING SYSTEM SERVICE 7.10, SP08, Patch Level 45

Solution

Apply the corresponding patch for your Support Package version. Refer to the ‘SP Patch Level’ information in this note.

For guidance on how to find the archives on the SAP Service Marketplace, refer to SAP Note 952402.

Reason and prerequisites

The corrections in security note 1723641 need to be supplemented to ensure comprehensive protection against the identified vulnerabilities.

References

• SAP Note 1723641 – Untrusted XML input parsing possible in XI Adapter Framework

Affected components

• MESSAGING: Version 7.10 to 7.10