Tag: Business Server Pages

Unauthorized modification of displayed content, SAP security note 1583235

RedRays Team June 14, 2011

Unauthorized modif. of stored content in Compl. Workbench, SAP security note 1476347

RedRays Team December 14, 2010

Unauthorized usage of appl. functionality in Plant Manager, SAP security note 1525664

RedRays Team December 14, 2010

Cross Site Scripting (XSS), SAP security note 705187

RedRays Team December 8, 2010

HTML Encoding of Error Messages, SAP security note 887323

RedRays Team October 8, 2009

BSP Security Relevant Changes, SAP security note 891232

RedRays Team October 8, 2009

Whitelist checks of sap-exit URL, SAP security note 887322

RedRays Team October 8, 2009

BSP Page Directive <%@page forceEncode="html"%> & <%html=%>, SAP security note 887168

RedRays Team October 8, 2009

XSS Support for BSP-Extensions HTMLB, XHTMLB and PHTMLB, SAP security note 822881

RedRays Team October 8, 2009