Tag: Web Dynpro ABAP

CVE-2021-21478 Reverse Tabnabbing vulnerability in SAP NetWeaver Application Server ABAP (Applications based on Web Dynpro ABAP), SAP security note 2974582

RedRays Team February 9, 2021

CVE-2020-6240 Denial of service (DOS) in SAP NetWeaver Application Server ABAP (Web Dynpro ABAP), SAP security note 2856923

RedRays Team May 12, 2020

Information Disclosure in Web Dynpro ABAP applications, SAP security note 2819233

RedRays Team May 12, 2020

Potentially false redirection of Web site content in Web Dynpro ABAP application, SAP security note 2081029

RedRays Team April 17, 2018

Information Disclosure in Webdynpro LIST UIBB Search hits are marked in invisible cells, SAP security note 2353643

RedRays Team October 14, 2017

Cross-Site Scripting (XSS) vulnerability in Web Dynpro ABAP, SAP security note 2488516

RedRays Team September 12, 2017

Cross site scripting (XSS) vulnerability in Web Dynpro ABAP, SAP security note 2332977

RedRays Team March 14, 2017

Cross-Site Scripting (XSS) vulnerability in CL_WDR_CLIENT_SSR_LS, SAP security note 2303032

RedRays Team July 12, 2016

Whitelist based Clickjacking Framing Protection in Web Dynpro ABAP, SAP security note 1872800

RedRays Team July 12, 2016

Cross-Site Scripting (XSS) vulnerability in UR Control., SAP security note 2201295

RedRays Team April 12, 2016

Missing authorization check in Web Dynpro ABAP, SAP security note 1950021

RedRays Team December 9, 2014

Missing authorization check in Web Dynpro ABAP, SAP security note 1812543

RedRays Team April 2, 2014