Update #1 to Security Note 1610466, SAP security note 1670766

SAP Note 1670766

SAP security note 1670766, "Update #1 to Security Note 1610466", is a note. Below are the SAP recommended solution and the affected software components.

Description

Solution

Please refer to the solution provided in Security Note 1610466 for detailed instructions.

Reason and prerequisites

The correction instructions of Security Note 1610466 have been updated. The implementation of Security Note 161046 is a prerequisite for applying this note.

References

This note refers to

1610466 – Unauthorized modification of displayed content in TEST_SRT

Affected components

SAP_BASIS 7.02
SAP_BASIS 7.11
SAP_BASIS 7.20
SAP_BASIS 7.30
SAP_BASIS 7.31

Full note on SAP: SAP Support Launchpad note 1670766

Detailed exploitation and proof-of-concept material for this note is maintained in the RedRays Security Platform. For access, contact [email protected].

#Reflected cross-site scripting #XSS #TEST_SRT #Update #Update Note

Explore More

Three identical server cabinets carrying stacks of code of very different heights beside a measuring rule

ABAP Code Security Scan Cost Drivers

August 4, 2026

What moves the cost of an ABAP code security scan: custom object counts, effective lines, systems in scope, transport gating, triage and retest.

Exploded stack of six SAP landscape layers with a single red attack path piercing every layer

SAP Penetration Testing: What Gets Tested

August 4, 2026

What an SAP penetration testing scope actually contains, layer by layer, from the message server and ICF tree to custom ABAP and the BTP side.

Technical findings on the left passing through a glass pane and emerging on the right as business documents, with one red thread landing on a bank transfer slip

How SAP Vulnerability Assessment Reduces Business Risk

August 4, 2026

How an SAP vulnerability assessment turns into business risk a board understands: what it covers, how it differs from a pentest, cadence and ownership.

Grid of passed audit checks with a few gaps where unreviewed custom code shows through in red

SAP Security Risks Enterprises Still Miss

August 4, 2026

The SAP security risks that survive a clean audit: unread custom ABAP, RFC destinations, forgotten ICF services and the BTP layer nobody owns.