Tag: Note Assistant

Missing XML Validation vulnerability in SAP Note Assistant, SAP security note 2425129

RedRays Team January 29, 2019

Handling of Digitally Signed notes in SAP Note Assistant, SAP security note 2408073

RedRays Team January 16, 2018

CVE-2017-16691 SNOTE Digital signature verification along with note file extraction, SAP security note 2546220

RedRays Team December 12, 2017

Insufficient logging in SNOTE, SAP security note 2235515

RedRays Team May 9, 2017

External RFC callback to customer systems in SNOTE, SAP security note 2235513

RedRays Team November 30, 2015

Standard RFC destination for note download can be overridden, SAP security note 2235514

RedRays Team November 13, 2015