Description
SAP E-Sourcing customers have identified an issue where users of Microsoft® Internet Explorer may be susceptible to a cross-site framing attack due to an access validation error. Cross-site framing is when other sites encapsulate the SAP E-Sourcing application in another frame. This can result in users having their data stolen by phishing or spoofing attacks.
Available fix and Supported packages
- ESOUSRMJAVASERVER | 4.2 | 4.2
Affected component
- SRM-ESO-UI
User Interface for SAP Sourcing & CLM
CVSS
Score: 0
PoC
Detailed vulnerability information added to RedRays Security Platform. Contact [email protected] for details.
URL
https://launchpad.support.sap.com/#/notes/1262354
