Javascript is currently disabled. This site requires Javascript to function correctly. Please enable Javascript in your browser!

Skip navigation

Security Threat No. 1:

ABAP Command Injection

Coding that dynamically creates and executes ABAP programs based on user input on a productive system.
Security Threat No. 2:

Cross-Site-Scripting

Cross-Site Scripting (XSS) attacks are targeted at users that run business applications in Web browsers. An XSS vulnerability compromises the security of the attacked user's client system.
Security Threat No. 3:

SQL Injection

Coding that makes use of SQL queries, where part of such a query is based on input is a security risk. Enables users to alter the SQL query accessing restricted data without authorization.
Security Threat No. 4:

OS Command Injection

Coding that executes arbitrary (input-based) commands on the operating system, bypassing the allowed commands specified in transaction SM49/SM69.
Security Threat No. 5:

Directory Traversal

Coding that performs server-side file/directory read/write access, where a file name or path based on unvalidated user input is a risk. Gives attackers access to restricted files or directories.
Security Threat:

More Security Threats

Creative Hackers work hard to exploit security gaps.
We harden your software.

Skip navigation

See more – know more

Virtual Forge CodeProfiler helps you to detect, prioritize and fix security weaknesses in your ABAP^TM code.

Whitepapers

Writing Fast and Secure Code in C
By Sebastian Schinzel
Describes the special vulnerability for buffer overflows in C, and explains how developers can harden their code against this and other vulnerabilities.
Web Application Vulnerability Scanners - a Benchmark
By Andreas Wiegenstein, Frederik Weidemann, Sebastian Schinzel, Dr. Markus Schumacher
Analyzes the efficiency and reliability of black box scanners when searching for vulnerabilities in Web applications
The Cross Site Scripting Threat
By Andreas Wiegenstein, Dr. Markus Schumacher, Xu Jia, Frederik Weidemann
Detailed (technical) discussion of Cross-Site Scripting vulnerabilities and their damage potential.
The Impact of Cross-Site Scripting on Your Business
By Andreas Wiegenstein
High-level overview of the business risks related to Cross-Site Scripting vulnerabilities.