Update 1 to security note 1661157, SAP security note 1769046

Description

Security note 1661157 has been rereleased with updated corrections.
After the implementation of SAP Note 1661157 the activation of the program SAPLSPML_CLIENT fails. There is a SYNTAX_ERROR in the include LSPML_CLIENT$02: Line 000014 – Type ‘HTTP_INVALID_TIMEOUT’ is unknown.

Basis releases 7.02 and newer

Available fix and Supported packages

SAP_BASIS | 702 | 702
SAP_BASIS | 720 | 730
SAP_BASIS | 731 | 731

Affected component

CVSS

Score: 0

PoC

Detailed vulnerability information added to RedRays Security Platform. Contact [email protected] for details.

URL

https://launchpad.support.sap.com/#/notes/1769046

TAGS

#HTTP_INVALID_TIMEOUT
#SAPLSPML_CLIENT
#LSPML_CLIENT$02
#RSECNOTE
#SYNTAX_ERROR
#update
#update-note

More to explorer

[PoC] SAP PING PONG – XSS and URL Redirection Vulnerabilities

October 22, 2024

Recently, SAP released a security update for SAP NetWeaver AS for ABAP and ABAP Platform, addressing multiple vulnerabilities related to cross-site scripting

[PoC] SAP Note 3433192 – Code Injection vulnerability in SAP NetWeaver AS Java

October 17, 2024

Overview Recently, SAP released Security Note 3433192, which addresses a critical code injection vulnerability (CVE-2024-22127) within the SAP NetWeaver AS Java Administrator

CVE-2024-37180 – Information Disclosure Vulnerability in SAP NetWeaver Application Server for ABAP and ABAP Platform

October 8, 2024

Release Date: October 8, 2024SAP Security Note: 3454858Component: SAP NetWeaver Application Server for ABAP and ABAP PlatformPriority: MediumCategory: Information DisclosureCVE Identifier: CVE-2024-37180

CVE-2024-47594 – Cross-Site Scripting (XSS) Vulnerability in SAP NetWeaver Enterprise Portal (KMC)