Skip links
Arpine Maghakyan

Arpine Maghakyan

Security Researcher of RedRays.

Unauthorized modification of displayed content in CRM EP, SAP security note 1536291

Description

This security note has been updated. For more detailed information, see Security Note 1557426.

The CRM portal integration could be abused by a malicious user, who could modify displayed application content without authorization and potentially obtain authentication information from other legitimate users.

Available fix and Supported packages

  • BP_CRM50 | 6.0 | 6.0
  • CRMFND | 700 | 700
  • CRMFND | 701 | 701
  • BP CRM FOUNDATION CODING 7.0 | SP008 | 000001
  • BP CRM FOUNDATION CODING 7.01 | SP003 | 000001
  • BP SAP CRM 6.0 (NEW) | SP007 | 000001

Affected component

    CA-WUI-EP
    Portal Integration

CVSS

Score: 0

Exploit

Exploit is not available.
For detailed information please contact the mail [email protected].

URL

https://launchpad.support.sap.com/#/notes/1536291

TAGS

#Reflected-Cross-Site-Scripting
#XSS
#CRM-portal-integration.

More to explorer