Description
WebDynpro applications have a security vulnerability that allows Cross Site Scripting(XSS) via CurrentFocusID.
Available fix and Supported packages
- SAP_JTECHS | 6.40 | 6.40
- SAP_JTECHS | 7.00 | 7.02
- SAP_JTECHF | 7.00 | 7.02
- SAP_JTECHF | 6.40 | 6.40
- WD-RUNTIME | 7.10 | 7.11
Affected component
- BC-WD-CLT-HTM
HTML Rendering
CVSS
Score: 0
Exploit
Exploit is not available.
For detailed information please contact the mail [email protected].
URL
https://launchpad.support.sap.com/#/notes/1321116