Description
FSCM Biller Direct running on JSP technology is not protected against Clickjacking attacks.
Available fix and Supported packages
- FSCM_BD | 600 | 600
- FSCM_BD | 602 | 602
- FSCM_BD | 604 | 604
- FSCM_BD | 605 | 605
- FSCM_BD | 635 | 635
- FSCM-BILLER DIRECT 6.0 | SP023 | 000001
- FSCM-BILLER DIRECT 6.02 | SP013 | 000001
- FSCM-BILLER DIRECT 6.04 | SP011 | 000001
- FSCM-BILLER DIRECT 6.05 | SP010 | 000001
- FSCM-BILLER DIRECT 6.35 | SP003 | 000001
Affected component
- FIN-FSCM-BD
Biller Direct
CVSS
Score: 0
PoC
Detailed vulnerability information added to RedRays Security Platform. Contact [email protected] for details.
URL
https://launchpad.support.sap.com/#/notes/2339167