Solution : https://service.sap.com/sap/support/notes/1537670 (SAP Service marketplace login required)
Key words :
additional affected sap delivered jsp pages, prerequisites fscm_bd executes state changing functionality, terms cross-site request forgery, sap netweaver application server java, sap xsrf protection guide, xsrf manual protection method, addressed inside web applications, state changing operations, xsrf protection framework, enable xsrf protection
Related Notes :
| 1597549 | Unauthorized modification of displayed content in FSCM_BD |
| 1515190 | Composite SAP Note: Security of SAP Biller Direct |
| 1509214 | Unauthorized usage of application functionality in FSCM_BD |