EIC Avoid XSS in EIC I, SAP security note 1105547

Description

In the Employee Interaction Center you want to avoid Cross-sitescripting

Activity search result tables is not rendered correctly

Available fix and Supported packages

EA-HR | 602 | 602
EA-HR | 603 | 603
ECC-VPCKHR | 601 | 601
EA-HR 602 | SAPK-60202INEAHR |
EA-HR 603 | SAPK-60301INEAHR |
ECC-VPCKHR 601 | SAPK-60105INECCVPHR |

Affected component

CVSS

Score: 0

PoC

Detailed vulnerability information added to RedRays Security Platform. Contact [email protected] for details.

URL

https://launchpad.support.sap.com/#/notes/1105547

TAGS

#XSS-cross-site-scripting-eic-activity-activity-search-cl_http_utility-if_http_utility-escape_javascript-javascript

Explore More

CVE-2025-0063 SQL Injection Vulnerability in SAP NetWeaver AS for ABAP and ABAP Platform

January 14, 2025

CVSS Score: 8.8 (AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Affected Component: SAP NetWeaver AS for ABAP and ABAP Platform (Informix Database Interface) Description: A critical SQL injection

SAP Security Patch Day – January 2025 Overview

January 14, 2025

On January 14, 2025, SAP released its monthly Security Patch Day updates, addressing several vulnerabilities across various products, including SAP NetWeaver Application

How to Install the RedRays ABAP Security Plugin for Eclipse

December 23, 2024

The RedRays ABAP Security Plugin allows developers to analyze ABAP code for potential security vulnerabilities directly within Eclipse. Follow these step-by-step instructions

How to Install and Configure the RedRays ABAP Code Scanner Plugin for VS Code