SAP E-Sourcing customers have identified an issue where users of Microsoft® Internet Explorer may be susceptible to a cross-site framing attack due to an access validation error. Cross-site framing is when other sites encapsulate the SAP E-Sourcing application in another frame. This can result in users having their data stolen by phishing or spoofing attacks.
Available fix and Supported packages
- ESOUSRMJAVASERVER | 4.2 | 4.2
User Interface for SAP Sourcing & CLM
Exploit is not available.
For detailed information please contact the mail [email protected].