SAP Note 1287570
SAP security note 1287570, “BBP_QUOT: Cross-Site Scripting ( XSS )”, is a note. Below are the symptom, SAP recommended solution and the affected software components.
Description
Symptom
In the Internet Services BBP_QUOT, you can perform cross-site scripting using certain parameters.
Solution
Refer to the overview below to see in which Support Packages the error has been corrected. For an advance correction, implement the correction instruction via SNOTE.
Reason and prerequisites
The issue is caused by a program error.
References
Affected components
- Supplier Relationship Management > SRM > Technical Issues > ITS and Web files
Full note on SAP: SAP Support Launchpad note 1287570
Detailed exploitation and proof-of-concept material for this note is maintained in the RedRays Security Platform. For access, contact [email protected].
