SAP E-Sourcing customers have identified an issue where users of Microsoft® Internet Explorer may be susceptible to a cross-site framing attack due to an access validation error. Cross-site framing is when other sites encapsulate the SAP E-Sourcing application in another frame. This can result in users having their data stolen by phishing or spoofing attacks.
Available fix and Supported packages
- ESOUSRMJAVASERVER | 4.2 | 4.2
User Interface for SAP Sourcing & CLM
Detailed vulnerability information added to RedRays Security Platform. Contact [email protected] for details.