3091169 - ICM (Internet Communication Manager) General guidelines on HTTP vulnerability scans

An HTTP entry point URL of a Netweaver system is submitted into a web Application Vulnerability Scanner (i.e. https://securityheaders.com/). As result, there might be some HTTP headers considered missing and/or the presence of others can be deemed as a potential vulnerability.

• SAP Netweaver
• Internet Communication Manager
• SAP Web Dispatcher

Missing Security Headers, HTST, CSP, Content Security Policy, X-Frame-Options, CSRF Token, X-XSS-Protection, X-Content-Type-Options , KBA , BC-CST-IC , Internet Communication Manager , BC-CST-WDP , Web Dispatcher , How To