Update #1 to Security Note 1491867, SAP security note 1557996

Description

Correction instructions provided for the vulnerability Cross Site Scripting addressed in Security Note 1491867 must be corrected for the following releases:

WEBCUIF 701

Available fix and Supported packages

WEBCUIF | 701 | 701
WEBCUIF 701 | SAPK-70104INWEBCUIF |

Affected component

CVSS

Score: 0

PoC

Detailed vulnerability information added to RedRays Security Platform. Contact [email protected] for details.

URL

https://launchpad.support.sap.com/#/notes/1557996

TAGS

#Cross-Site-Scripting
#Broadcasting
#Javascript
#Update
#Update-Note

More to explorer

[PoC] SAP PING PONG – XSS and URL Redirection Vulnerabilities

October 22, 2024

Recently, SAP released a security update for SAP NetWeaver AS for ABAP and ABAP Platform, addressing multiple vulnerabilities related to cross-site scripting

[PoC] SAP Note 3433192 – Code Injection vulnerability in SAP NetWeaver AS Java

October 17, 2024

Overview Recently, SAP released Security Note 3433192, which addresses a critical code injection vulnerability (CVE-2024-22127) within the SAP NetWeaver AS Java Administrator

CVE-2024-37180 – Information Disclosure Vulnerability in SAP NetWeaver Application Server for ABAP and ABAP Platform

October 8, 2024

Release Date: October 8, 2024SAP Security Note: 3454858Component: SAP NetWeaver Application Server for ABAP and ABAP PlatformPriority: MediumCategory: Information DisclosureCVE Identifier: CVE-2024-37180

CVE-2024-47594 – Cross-Site Scripting (XSS) Vulnerability in SAP NetWeaver Enterprise Portal (KMC)