Exploits (Java Script, Flash, ActiveX) - SAP principles found where?

Former Member — Wed, 18 Nov 2009 10:50:56 GMT

Hi people!

SAP releases support for rich Web Browser applications in Web Dynpro (Flash).

The use of the Web Browser as FrontEnd in Business transactions will grow in the future.

Every week we read of new exploits in applications that enriches the Web Browsers.

It could be Java Script, Flash or ActiveX. Like this for example:

http://www.computerworld.com/s/article/9140768/Flash_flaw_puts_most_sites_users_at_risk_say_researchers

Some exploits has over the years been so severe that users have been recommended to deactivate the application until a solution is delivered.

If we are dependent of the Web Browser application for important Business Transactions it becomes more problematic to deactivate it.

I am looking for information around this area. I have not found anything in SAPNet or SDN, but I have some problems knowing where to look. I have not found this aspect somewhere.

If you have information of official documents or URLs, please provide it in this thread.

Cheers,

Lasse

Re: Exploits (Java Script, Flash, ActiveX) - SAP principles found where?

Former Member — Wed, 28 Dec 2011 10:26:45 GMT

Hi,

I'm not 100% sure if this will help, but you could have a look at two places:

SAP Security Guides: [https://websmp210.sap-ag.de/securityguide]

There are security guides for all applications / installations giving recommendations on how to secure the systems.

SAP Security notes: [https://websmp102.sap-ag.de/securitynotes]

These SAP OSS notes describe security issues in various SAP components including web applications. On monthly basis security issues and their solutions are published here

Kind regards

Maaike

topic Exploits (Java Script, Flash, ActiveX) - SAP principles found where? in Application Development and Automation Discussions

Exploits (Java Script, Flash, ActiveX) - SAP principles found where?

Re: Exploits (Java Script, Flash, ActiveX) - SAP principles found where?