Update #1 to security note 1488451, SAP security note 1698575

Description

Security note 1488451 has been rereleased due to added correction instructions. Correction instructions have been added for the following
releases: BBPCRM 5.0, BBPCRM 6.0, BBPCRM 7.0

Available fix and Supported packages

BBPCRM | 500 | 500
BBPCRM | 600 | 600
BBPCRM | 700 | 700

Affected component

CVSS

Score: 0

PoC

Detailed vulnerability information added to RedRays Security Platform. Contact [email protected] for details.

URL

https://launchpad.support.sap.com/#/notes/1698575

TAGS

#CRM
#ISE
#ICSS
#BSP
#ICSS_CONSUM_REG
#Stored-Cross-Site-Scripting
#XSS
#update
#update-note

More to explorer

[PoC] SAP PING PONG – XSS and URL Redirection Vulnerabilities

October 22, 2024

Recently, SAP released a security update for SAP NetWeaver AS for ABAP and ABAP Platform, addressing multiple vulnerabilities related to cross-site scripting

[PoC] SAP Note 3433192 – Code Injection vulnerability in SAP NetWeaver AS Java

October 17, 2024

Overview Recently, SAP released Security Note 3433192, which addresses a critical code injection vulnerability (CVE-2024-22127) within the SAP NetWeaver AS Java Administrator

CVE-2024-37180 – Information Disclosure Vulnerability in SAP NetWeaver Application Server for ABAP and ABAP Platform

October 8, 2024

Release Date: October 8, 2024SAP Security Note: 3454858Component: SAP NetWeaver Application Server for ABAP and ABAP PlatformPriority: MediumCategory: Information DisclosureCVE Identifier: CVE-2024-37180

CVE-2024-47594 – Cross-Site Scripting (XSS) Vulnerability in SAP NetWeaver Enterprise Portal (KMC)