SAP Security Note
SAP security note 508300, "ICM Patch Collection (Release 6.20)", is a note released on October 8, 2009. Below are the SAP recommended solution and the affected software components.
Description
Solution
The ICM Patch Collection addresses a wide range of issues related to the Internet Communication Manager, including:
- Stability Enhancements: fixes for ICM crashes and incorrect behaviors to ensure smoother operations.
- Performance Optimizations: improvements in handling connections, load balancing, and resource management to boost system performance.
- Security Improvements: enhancements in SSL handling, protection against cross-site scripting (XSS) attacks, and other security-related fixes.
- Functionality Updates: updates to support features like HTTPS proxy authentication, better session management, and more robust error handling.
Affected components
- SAP_BASIS: 46C to 46D
- SAP_BASIS: 610 to 640
Full note on SAP: SAP Support Launchpad note 508300
Detailed exploitation and proof-of-concept material for this note is maintained in the RedRays Security Platform. For access, contact [email protected].




