Missing Authorizations Checks for a Customizing Distribution, SAP security note 1597391 RedRays Team December 13, 2011
Potential disclosure of persisted data in BC-sets., SAP security note 1499374 RedRays Team December 14, 2010