SAP security note 2172204, "Update 1 to Security Note 1661636", is a program error note released on 23.05.2015. Below are the symptom, SAP recommended solution and the affected software components.
Description
Symptom
Security note 1661636 has been re-released with extended validity for the following release:
SAP_BS_FND 747 SAPK-74710INSAPBSFND
Solution
Please apply note 1661636 or the corresponding support package to resolve this security issue. A XSS check has been added for the necessary input parameters.
Reason and prerequisites
The validity of the correction instructions must be adjusted in security note 1661636.
CVSS
Score 0
References
This note refers to
Affected components
- SAP_BS_FND 747
Full note on SAP: SAP Support Launchpad note 2172204
Detailed exploitation and proof-of-concept material for this note is maintained in the RedRays Security Platform. For access, contact [email protected].