Карточка уязвимости
Характеристики уязвимости
Уровень опасности
Оценка CVSS
Производитель ПО
Наименование ПО
SAP Notes
(1686821-2)
SAP Support Packages
(SAPK-10002INSRMSMC)
Описание
The BSP applications using an extension tag relies on this proper encoding. Missing or improper encoding within an extension may lead to XSS vulnerabilities in the BSP applications using the extension.
The BSP tags of the BSP extensions /SRMSMC/QL_EXT and /SRMSMC/FRONTEND/ might be misused in clients modifications because of missing encoding of _ALL_ attribute values passed to this extension.
The BSP tags of the BSP extensions /SRMSMC/QL_EXT and /SRMSMC/FRONTEND/ might be misused in clients modifications because of missing encoding of _ALL_ attribute values passed to this extension.
Как исправить
Make sure notes 1582870 and 1582867 have been implemented per SNOTE as prerequisites before you start with this implementation.
Please apply this note or import the changes via the relevant support
package.
Please apply this note or import the changes via the relevant support
package.
Ссылки
