SAP Security Blog
Browsing Category
SAP Note 2684760 – [CVE-2018-2470] Cross-Site Scripting (XSS) vulnerability in SAP NetWeaver AS ABAP Business Server Pages Version 8 from 18.10.2018 The header “X-Content-Type-Options” is not set. It can lead to MIME Sniffing Attacks. Solution “X-Content-Type-Options” is added to HTTP header of BSP and is set to “nosniff” for MIME objects.
In case of an error from a calling application with the SAP Cryptographic Library or with the Secure Login Library, consult this list of internal errors of the GSS module. See SAP Note 1867829 – List of SNC Error Codes. Troubleshooting Secure Login Library Other SAP Notes on that topic (credit goes to @Amitansu Satpathy and @Matt …
SAP GUI Security Guide More on that topic: the SAP Note 147519 – Maintenance strategy / deadlines for SAP GUI for Windows / SAP GUI for Java Version 148 from 04.10.2018 in English