| Package | Affected versions | Patched versions |
|---|---|---|
| abap platform | = 7.50= 7.51= 7.52= 7.53= 7.54 | |
| netweaver | = 7.02= 7.30= 7.31= 7.40 |
Under some circumstances the SAML SSO implementation in the SAP NetWeaver (SAP_BASIS versions 702, 730, 731, 740 and SAP ABAP Platform (SAP_BASIS versions 750, 751, 752, 753, 754), allows an attacker to include invalidated data in the HTTP response header sent to a Web user, leading to HTTP Response Splitting vulnerability.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free