Description
The Application SRM component SRM-EBP-WFL got the internet ITS service BBPWI. The service must be secured for XSS attacks. Therefore the used underlying existent and new dynpro variables must be html encoded.
Available fix and Supported packages
- SRM_SERVER | 500 | 500
- SRM_SERVER | 550 | 550
- SRM_SERVER 500 | SAPKIBKS18 |
- SRM_SERVER 550 | SAPKIBKT20 |
- SRM_SERVER 550 | SAPKIBKT21 |
Affected component
- SRM-EBP-WFL
Workflow
CVSS
Score: 0
PoC
Detailed vulnerability information added to RedRays Security Platform. Contact [email protected] for details.
URL
https://launchpad.support.sap.com/#/notes/1665973
