Description
WebDynpro applications have a security vulnerability that allows Cross Site Scripting(XSS) via CurrentFocusID.
Available fix and Supported packages
- SAP_JTECHS | 6.40 | 6.40
- SAP_JTECHS | 7.00 | 7.02
- SAP_JTECHF | 7.00 | 7.02
- SAP_JTECHF | 6.40 | 6.40
- WD-RUNTIME | 7.10 | 7.11
Affected component
- BC-WD-CLT-HTM
HTML Rendering
CVSS
Score: 0
PoC
Detailed vulnerability information added to RedRays Security Platform. Contact [email protected] for details.
URL
https://launchpad.support.sap.com/#/notes/1321116
