Missing authorization check in fumo EPS_DELETE_FILE, SAP security note 1554030 RedRays Team May 10, 2011
Security note Files transferrable to EPS inbox w/o auth., SAP security note 1330776 RedRays Team October 8, 2009