Skip links
RedRays
Arpine Maghakyan

Arpine Maghakyan

Security Researcher of RedRays.

Clickjacking Protection in Web Channel Experience Management (WCEM), SAP security note 2244161

Description

Application in WebChannelExperienceManagement (WCEM) is not protected against Clickjacking attacks.

Available fix and Supported packages

  • SAP-WEC-FRW | 3.0 | 3.0
  • WEB CHANNEL 3.0 | SP000 | 000049
  • WEB CHANNEL 3.0 | SP001 | 000025
  • WEB CHANNEL FRAMEWORK 3.0 | SP000 | 000049
  • WEB CHANNEL FRAMEWORK 3.0 | SP001 | 000025

Affected component

    WEC-FRW
    Web Channel Framework

CVSS

Score: 0

Exploit

Exploit is not available.
For detailed information please contact the mail [email protected]

URL

https://launchpad.support.sap.com/#/notes/2244161

TAGS

#UI-redressing-attack
#Clickjacking
#Framing-Protection
#Framing
#IFrame
#UI-Redressing
#Clickjacking-Whitelist
#X-FRAME-OPTIONS
#Frame-Busting
#WCEM
#Web-Channel
#WEC
#WCEM

More to explorer