CVE-2018-2502 | BDVDB-2026-110356 Detail

SAPSAP Business One Service Layer (B1_ON_HANA)

Description#

TRACE method is enabled in SAP Business One Service Layer . Attacker can use XST (Cross Site Tracing) attack if frontend applications that are using Service Layer has a XSS vulnerability. This has been fixed in SAP Business One Service Layer (B1_ON_HANA, versions 9.2, 9.3).

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=508559699
http://www.securityfocus.com/bid/106173
https://launchpad.support.sap.com/#/notes/2680492

Exploit#

No public exploit known

History#

Version 12018-12-11Record published in the CVE List.
Version 22024-08-05Most recent update recorded in the CVE List.