CVE-2018-2502

TRACE method is enabled in SAP Business One Service Layer . Attacker can use XST Cross Site Tracing attack if frontend applications that are using Service Layer has a XSS vulnerability. This has been fixed in SAP Business One Service Layer B1ONHANA, versions 9.2, 9.3...

CVE-2018-2502: Improper Neutralization of Input During Web Page Generation

TRACE method is enabled in SAP Business One Service Layer . Attacker can use XST Cross Site Tracing attack if frontend applications that are using Service Layer has a XSS vulnerability. This has been fixed in SAP Business One Service Layer B1ONHANA, versions 9.2, 9.3...

PT-2018-15603

Name of the Vulnerable Software and Affected Versions SAP Business One Service Layer versions prior to 9.2 and 9.3 Description The issue allows an attacker to potentially use a Cross Site Tracing XST attack if the frontend applications using the Service Layer have a Cross-Site Scripting XSS...