Skip to content
Advisories.
Packages

SAP security advisories

69 advisories · 24 critical or high in 12 months · latest Sep 22

Advisories page

60 of 69 advisories

Advisory
SAP Fiori Launchpad: information disclosure
Medium5.3Sep 22
SAP NetWeaver and ABAP Platform: missing authorization
Medium4.3Sep 8
SAP NetWeaver Business Client: code execution
High7.8Sep 8
SAP Web Dispatcher, Internet: information disclosure
Medium6.5Sep 8
SAP Cloud Application Programming Model (CAP): weakly protected credentials
Critical9.4Sep 8
SAP Manufacturing Integration and Intelligence: server-side request forgery
Medium6.5Sep 8
SAP UI5 does not sufficiently validate the parent frame's origin against the...
Medium4.3Sep 8
SAP Integration Suite: resource exhaustion
High8.5Sep 8
SAP S/4HANA: cross-site request forgery
Medium4.6Sep 8
SAP S/4HANA: cross-site request forgery
Low3.5Sep 8
SAP S/4HANA: cross-site request forgery
Low3.5Sep 8
SAP S/4HANA (Manage Bank Chains app): missing authorization
Medium4.3Sep 8
SAP NetWeaver (SAP GUI for Java): untrusted input in a security decision
Critical9.0Sep 8
SAP NetWeaver Message Server does not sufficiently validate the authenticity of...
Critical9.8Sep 8
SAP NetWeaver Application Server for ABAP and ABAP Platform: integer underflow
High7.7Sep 8
SAP Process Integration (SOAP Adapter): XML entity expansion
Low2.2Sep 8
SAP Extended Passport (EPP) Processing: buffer overflow
Critical10.0Sep 8
SAP S/4HANA (Intercompany Matching and Reconciliation): information disclosure
Medium6.5Sep 8
SAP S/4HANA (Manage Supply Protection): denial of service
High7.5Aug 25
SAP Commerce Cloud (Data Hub Adapter): remote code execution
Critical10.0Aug 11
SAP Business AI Platform (Approuter): improper signature check
Medium5.9Aug 11
SAP Business AI Platform (Approuter): path traversal
Medium5.9Aug 11
SAP Approuter does not sufficiently sanitize certain request headers before...
Medium5.3Aug 11
SAP NetWeaver Application Server ABAP: cross-site scripting
Medium6.3Aug 11
SAP BusinessObjects Business Intelligence Platform (Central : hard-coded key
High7.9Aug 11
SAP S/4 HANA (Reprocess Bank Statement Items): privilege escalation
Medium4.3Aug 11
SAP Social Intelligence: SQL injection
Medium6.3Aug 11
SAPUI5: cross-site scripting
Medium6.1Aug 11
SAP BusinessObjects Business Intelligence: missing authorization
Medium4.3Aug 11
SAP Odata: information disclosure
Medium5.9Aug 11
SAP Business AI Platform (Approuter): unchecked exceptional condition
Low3.7Aug 11
SAP Business AI Platform (Approuter): cross-site request forgery
Medium4.3Aug 11
SAP NetWeaver and ABAP: missing authorization
Medium4.2Aug 11
SAP ABAP Developer Tools: missing authorization
High8.8Aug 11
SAP Manufacturing Integration and Intelligence: missing authorization
Medium4.3Aug 11
SAP Advanced Planning and Optimization: hard-coded credentials
Low3.8Aug 11
SAP ABAP Platform: uninitialized resource
Medium5.3Aug 11
SAP BusinessObjects Business Intelligence: XML external entity
Medium6.5Aug 11
SAP Business AI Platform (Approuter): improper certificate validation
Medium6.4Aug 11
SAP Business AI Platform (Approuter): resource exhaustion
Medium4.3Aug 11
SAP Manufacturing Integration and Intelligence: missing authorization
High7.3Aug 11
SAP Manufacturing Integration and Intelligence: missing authorization
High7.3Aug 11
SAP Business AI Platform (Approuter): open redirect
High7.0Aug 11
SAP NetWeaver Application Server Java
Medium6.3Aug 11
SAP NetWeaver Application Server ABAP and ABAP Platform: command injection
Medium5.5Aug 11
SAP Business AI Platform (Approuter): information disclosure
Medium5.9Aug 11
SAP Business AI Platform (Approuter): resource exhaustion
Medium5.9Aug 11
SAP Business AI Platform (Approuter): untrusted input in a security decision
Low3.7Aug 11
SAP NetWeaver and ABAP Platform: memory corruption
Critical9.8Aug 11
SAPSPrint Service: memory corruption
Medium5.3Aug 11
SAP Manufacturing Integration and Intelligence: code execution
Critical9.1Aug 11
SAP Data Services Management Console: clickjacking
Low3.7Aug 11
SAP Manufacturing Integration and Intelligence: path traversal
High7.6Aug 11
SAP NetWeaver Application Server for ABAP: system information exposure
Medium4.3Jul 28
SAP Commerce Cloud could retain a sample OAuth2 client with publicly documented...
Critical9.1Jul 14
SAP @ui5/webcomponents-base: clickjacking
Medium6.1Jul 14
SAP CRM (WebClient UI): attacker could inject
Medium4.1Jul 14
SAP S/4HANA Project Management (PPM-PRO): SQL injection
Medium5.5Jul 14
SAP S/4 HANA (Create Single Payment): missing authorization
Medium4.3Jul 14
SAP S/4HANA (Draft operation): privilege escalation
Medium4.3Jul 14
About SAP

Security advisories SAP publishes for its own products.

url.sap/sapsecuritypatchdaySAP

SAP elsewhere on fru.dev: Acquisitions · Quarterly · Paydays · TechConf

Critical advisories by email

Wednesdays: the week’s critical and high advisories in the AI and data stack, with the fixed versions. Only in weeks that have some.

Double opt-in. Unsubscribe any time.