Security Advisories
We've created the first of its kind, SecurityBridge Cloud Platform to prioritize SAP patches, updates and the remediation strategies essential for preventing the disruption of vital business systems. Our security advisories enable SAP users to understand the security and business implications of running SAP.
We hope you like it!
This time we found critical correction advisiories. We count 10 and the highest CVSS score is 9.4.
Severity
SAP© Security advisories 10
System Types
Affected SAP© system types
Affected system
type
Java
Patchday
2024-03
Released
on
2024/03/12
Description
[CVE-2024-25645] Information Disclosure vulnerability in SAP NetWeaver (Enterprise Portal)
Affected system
type
ABAP
Patchday
2024-03
Released
on
2024/03/12
Description
[CVE-2024-22133] Improper Access Control in SAP Fiori Front End Server
Affected system
type
ABAP
Patchday
2024-03
Released
on
2024/03/12
Description
[CVE-2024-27900]Missing Authorization check in SAP ABAP Platform
Affected system
type
Java
Patchday
2024-03
Released
on
2024/03/12
Description
[CVE-2024-28163] Information Disclosure vulnerability in SAP NetWeaver Process Integration (Support Web Pages)
Affected system
type
Kernel
Patchday
2024-03
Released
on
2024/03/12
Description
[CVE-2024-27902] Cross-Site Scripting (XSS) vulnerability in SAP NetWeaver AS ABAP, applications based on SAPGUI for HTML (WebGUI)
Affected system
type
BI/BO platform
Patchday
2024-03
Released
on
2024/03/12
Description
[CVE-2023-50164] Path Traversal Vulnerability in SAP BusinessObjects Business Intelligence Platform (Central Management Console)
Affected system
type
Java
Patchday
2024-03
Released
on
2024/03/12
Description
[CVE-2024-25644] Information Disclosure vulnerability in SAP NetWeaver (WSRM)
Affected system
type
SAP Build Apps
Patchday
2024-03
Released
on
2024/03/12
Description
[CVE-2019-10744] Code Injection vulnerability in applications built with SAP Build Apps
Affected system
type
HANA platform
Patchday
2024-03
Released
on
2024/03/12
Description
[CVE-2023-44487 ] Denial of service (DOS) in SAP HANA XS Classic and HANA XS Advanced
Affected system
type
Java
Patchday
2024-03
Released
on
2024/03/12
Description
[CVE-2024-22127] Code Injection vulnerability in SAP NetWeaver AS Java (Administrator Log Viewer plug-in)