Solution : https://service.sap.com/sap/support/notes/1516177 (SAP Service marketplace login required)
Key words :
terms cross-site request forgery, cross site scripting attack, utlitiy customer e-services, prerequisites sap_uces executes, referencing specific urls, specific parameters, malicious user, trigger functionality, billerdirect reason, attacker tricks
Related Notes :
| 1597549 | Unauthorized modification of displayed content in FSCM_BD |
| 1509214 | Unauthorized usage of application functionality in FSCM_BD |
| 1450166 | Unauthorized usage of application functionality |