Security Advisory

CVE-2018-2502

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2018-12-11 23:00:00

Last updated 2024-08-05 04:21:34

Assigner sap

CVSS score not scored

State PUBLISHED

Description

TRACE method is enabled in SAP Business One Service Layer . Attacker can use XST (Cross Site Tracing) attack if frontend applications that are using Service Layer has a XSS vulnerability. This has been fixed in SAP Business One Service Layer (B1_ON_HANA, versions 9.2, 9.3).

← Browse all CVEs View on cve.org ↗