SAP Security Note
High priority
SAP security note 1661350, “ITS: Replace HTML encoding by new ABAP function”, was released on 10.07.2012. Below are the symptom, SAP recommended solution and the affected software components.
Description
Symptom
HTML encoding in the HTTP handler of ITS services will be replaced by a new ABAP function.
Solution
Please install the newest NetWeaver Basis Support Package.
Reason and prerequisites
Update to the newest function.
Affected components
- SAP_BASIS: 640 to 640
- SAP_BASIS: 700 to 702
- SAP_BASIS: 710 to 730
- SAP_BASIS: 731 to 731
Full note on SAP: SAP Support Launchpad note 1661350
Detailed exploitation and proof-of-concept material for this note is maintained in the RedRays Security Platform. For access, contact [email protected].
