Skip links
Picture of Vahagn Vardanian

Vahagn Vardanian

Co-founder and CTO of RedRays

Update #1 to Security Note 1491867, SAP security note 1557996

SAP Note 1557996

SAP security note 1557996, "Update #1 to Security Note 1491867". Below are the symptom and the SAP recommended solution.

Description

Symptom

Correction instructions provided for the vulnerability Cross Site Scripting addressed in Security Note 1491867 must be corrected for the following releases:

  • WEBCUIF 701

Solution

The implementation of this note is prerequisite for the system to function properly.

Reason and prerequisites

Security Note 1491867 contains correction instructions which are erroneous. The implementation of Security Notes 1491867 and 1512106 is prerequisite for applying this note.

Full note on SAP: SAP Support Launchpad note 1557996

Detailed exploitation and proof-of-concept material for this note is maintained in the RedRays Security Platform. For access, contact [email protected].

Explore More