Skip links

Security Enhancement for WFD, SAP security note 1238862

Description

To prevent any possible Cross-Site Request Forgery (XSRF) and Cross-Site scripting techniques on WFD application.

Available fix and Supported packages

  • SAP-CRMJAV | 5.0 | 5.0
  • SAP-CRMWEB | 5.0 | 5.0
  • SAP-SHRWEB | 5.0 | 5.0
  • SAP-SHRJAV | 5.0 | 5.0
  • SAP-CRMAPP | 5.0 | 5.0
  • SAP-SHRAPP | 5.0 | 5.0
  • CRM JAVA APPLICATIONS 5.0 | SP012 | 000009
  • CRM JAVA COMPONENTS 5.0 | SP012 | 000009
  • CRM JAVA WEB COMPONENTS 5.0 | SP012 | 000009
  • SAP SHARED JAVA APPLIC. 5.0 | SP012 | 000009
  • SAP SHARED JAVA COMPONENTS 5.0 | SP012 | 000009
  • SAP SHARED WEB COMPONENTS 5.0 | SP012 | 000009

Affected component

    CRM-WFD-RTL
    Multi-Site Workforce Deployment

CVSS

Score: 0

Exploit

Detailed vulnerability information added to RedRays Security Platform. Contact [email protected] for details.

URL

https://launchpad.support.sap.com/#/notes/1238862

TAGS

#Interaction-Center-Workforce-Management
#IC-WFM
#MS-WFD
#MultisiteWorkforce-Deployment
#Workforce-Management
#XSS
#XSRF

How to detect over 4100 vulnerabilities in SAP Systems?

More to explorer

Initiating SAP Penetration Testing

►   Pentest, short for penetration testing, refers to a set of processes that simulate an attacker’s actions to identify security vulnerabilities. Companies