RedRays Team 10 years ago Untrusted XML input parsing possible in BC-TWB-TST-ECA, SAP security note 2016638
RedRays Team 10 years ago Unauthorized modification of displayed content in User Self Service, SAP security note 1937544
RedRays Team 10 years ago Credentials are stored in memory by SAP MDM GDS 2.1, SAP security note 1605531
RedRays Team 10 years ago Directory traversal in /CEECV/ROFI_D205_MERGE_XML, SAP security note 1953939
RedRays Team 10 years ago Switchable authorization checks for RFC in Biller Direct, SAP security note 2069588