Security Advisories

We've created the first of its kind, SecurityBridge ^{Cloud Platform} to prioritize SAP patches, updates and the remediation strategies essential for preventing the disruption of vital business systems. Our security advisories enable SAP users to understand the security and business implications of running SAP.

The user interface, is designed to be as intuitive as possible but we'd love to hear your feedback and opinions.
We hope you like it!

× Yikes, there is work to do!
This time we found critical correction advisiories. We count 667 and the highest CVSS score is 10.0.

Severity

SAP© Security advisories 667

System Types

Affected SAP© system types

_{Related note}
3328495

_CVSS
9.8

_{Affected system
type}
Reprise License Manager

_Patchday
2023-05

_{Released
on}
2023/05/09

Description
Multiple vulnerabilities associated with Reprise License Manager 14.2 component used with SAP 3D Visual Enterprise License Manager

Security Advisory

_{Related note}
3315979

_CVSS
5.4

_{Affected system
type}
ABAP

_Patchday
2023-05

_{Released
on}
2023/05/09

Description
[CVE-2023-29188] Cross-Site Scripting (XSS) vulnerability in SAP CRM WebClient UI

Security Advisory

_{Related note}
3312892

_CVSS
5.4

_{Affected system
type}
ABAP

_Patchday
2023-05

_{Released
on}
2023/05/09

Description
[CVE-2023-31407] Cross-Site Scripting (XSS) vulnerability in SAP Business Planning and Consolidation

Security Advisory

_{Related note}
3315971

_CVSS
6.1

_{Affected system
type}
ABAP

_Patchday
2023-05

_{Released
on}
2023/05/09

Description
[CVE-2023-30742] Cross-Site Scripting (XSS) vulnerability in SAP CRM (WebClient UI)

Security Advisory

_{Related note}
3309935

_CVSS
6.1

_{Affected system
type}
BI/BO platform

_Patchday
2023-05

_{Released
on}
2023/05/09

Description
[CVE-2023-30741] Cross-Site Scripting (XSS) vulnerability in SAP BusinessObjects Business Intelligence platform

Security Advisory

_{Related note}
3302595

_CVSS
3.7

_{Affected system
type}
BI/BO platform

_Patchday
2023-05

_{Released
on}
2023/05/09

Description
[CVE-2023-28764] Information Disclosure vulnerability in SAP BusinessObjects Business Intelligence platform

Security Advisory

_{Related note}
3313484

_CVSS
6.3

_{Affected system
type}
BI/BO platform

_Patchday
2023-05

_{Released
on}
2023/05/09

Description
[CVE-2023-30740] Information Disclosure vulnerability in SAP BusinessObjects Business Intelligence platform

Security Advisory

_{Related note}
3300624

_CVSS
7.5

_{Affected system
type}
SAP PowerDesigner

_Patchday
2023-05

_{Released
on}
2023/05/09

Description
[CVE-2023-32111] Memory Corruption vulnerability in SAP PowerDesigner (Proxy)

Security Advisory

_{Related note}
3323415

_CVSS
8.2

_{Affected system
type}
SAP Integrated...

_Patchday
2023-05

_{Released
on}
2023/05/09

Description
[CVE-2023-29080] Privilege escalation vulnerability in SAP IBP, add-in for Microsoft Excel

Security Advisory

_{Related note}
3321309

_CVSS
7.5

_{Affected system
type}
SAP Commerce

_Patchday
2023-05

_{Released
on}
2023/05/09

Description
Information Disclosure vulnerability in SAP Commerce (Backoffice)

Security Advisory

_{Related note}
3038911

_CVSS
5.0

_{Affected system
type}
BI/BO platform

_Patchday
2023-05

_{Released
on}
2023/05/09

Description
[CVE-2023-31404] Information Disclosure in SAP BusinessObjects Business Intelligence Platform (Central Management Service)

Security Advisory

_{Related note}
3320467

_CVSS
7.5

_{Affected system
type}
SAP GUI / Frontend

_Patchday
2023-05

_{Released
on}
2023/05/09

Description
[CVE-2023-32113] Information Disclosure vulnerability in SAP GUI for Windows

Security Advisory

_{Related note}
3307833

_CVSS
9.1

_{Affected system
type}
BI/BO platform

_Patchday
2023-05

_{Released
on}
2023/05/09

Description
[CVE-2023-28762] Information Disclosure in SAP BusinessObjects Business Intelligence Platform (Central Management Console)

Security Advisory

_{Related note}
3319400

_CVSS
6.1

_{Affected system
type}
BI/BO platform

_Patchday
2023-05

_{Released
on}
2023/05/09

Description
[CVE-2023-31406] Cross-Site Scripting (XSS) vulnerability in SAP BusinessObjects Business Intelligence platform

Security Advisory

_{Related note}
3317453

_CVSS
8.2

_{Affected system
type}
Java

_Patchday
2023-05

_{Released
on}
2023/05/09

Description
[CVE-2023-30744] Improper access control during application start-up in SAP AS NetWeaver JAVA

Security Advisory

_{Related note}
3320145

_CVSS
7.5

_{Affected system
type}
SAP Commerce

_Patchday
2023-05

_{Released
on}
2023/05/09

Description
Denial of service (DOS) in SAP Commerce

Security Advisory

_{Related note}
2335198

_CVSS
2.8

_{Affected system
type}
ABAP

_Patchday
2023-05

_{Released
on}
2023/05/09

Description
[CVE-2023-32112] Missing Authorization Check in Vendor Master Hierarchy

Security Advisory

_{Related note}
3326210

_CVSS
7.1

_{Affected system
type}
ABAP

_Patchday
2023-05

_{Released
on}
2023/05/09

Description
[CVE-2023-30743] Improper Neutralization of Input in SAPUI5

Security Advisory

_{Related note}
3301457

_CVSS
4.3

_{Affected system
type}
ABAP

_Patchday
2023-04

_{Released
on}
2023/04/11

Description
[CVE-2023-1903] Missing Authorization check in SAP HCM Fiori App My Forms (Fiori 2.0)

Security Advisory

_{Related note}
3305369

_CVSS
10.0

_{Affected system
type}
Java

_Patchday
2023-04

_{Released
on}
2023/04/11

Description
[CVE-2023-27497] Multiple vulnerabilities in SAP Diagnostics Agent (OSCommand Bridge and EventLogServiceCollector)

Security Advisory

_{Related note}
3117978

_CVSS
3.1

_{Affected system
type}
ABAP

_Patchday
2023-04

_{Released
on}
2023/04/11

Description
[CVE-2023-29111] Information Disclosure vulnerability in SAP Application Interface Framework (ODATA service)

Security Advisory

_{Related note}
3287784

_CVSS
5.3

_{Affected system
type}
Java

_Patchday
2023-04

_{Released
on}
2023/04/11

Description
[CVE-2023-24527] Improper Access Control in SAP NetWeaver AS Java for Deploy Service

Security Advisory

_{Related note}
3303060

_CVSS
5.3

_{Affected system
type}
ABAP

_Patchday
2023-04

_{Released
on}
2023/04/11

Description
[CVE-2023-29185] Denial of Service (DOS) in SAP NetWeaver AS for ABAP (Business Server Pages)

Security Advisory

_{Related note}
3269352

_CVSS
5.4

_{Affected system
type}
ABAP

_Patchday
2023-04

_{Released
on}
2023/04/11

Description
[CVE-2023-29189] HTTP Verb Tampering vulnerability in SAP CRM (WebClient UI)

Security Advisory

_{Related note}
3309056

_CVSS
6.0

_{Affected system
type}
ABAP

_Patchday
2023-04

_{Released
on}
2023/04/11

Description
[CVE-2023-27897] Code Injection vulnerability in SAP CRM

Security Advisory

_{Related note}
3298961

_CVSS
9.8

_{Affected system
type}
BI/BO platform

_Patchday
2023-04

_{Released
on}
2023/04/11

Description
[CVE-2023-28765] Information Disclosure vulnerability in SAP BusinessObjects Business Intelligence Platform (Promotion Management )

Security Advisory

_{Related note}
3275458

_CVSS
6.1

_{Affected system
type}
Kernel

_Patchday
2023-04

_{Released
on}
2023/04/11

Description
[CVE-2023-27499] Cross-Site Scripting (XSS) vulnerability in SAP GUI for HTML

Security Advisory

_{Related note}
3315312

_CVSS
5.0

_{Affected system
type}
Kernel

_Patchday
2023-04

_{Released
on}
2023/04/11

Description
[CVE-2023-29108] IP filter vulnerability in ABAP Platform and SAP Web Dispatcher

Security Advisory

_{Related note}
3114489

_CVSS
3.7

_{Affected system
type}
ABAP

_Patchday
2023-04

_{Released
on}
2023/04/11

Description
[CVE-2023-29112] Code Injection vulnerability in SAP Application Interface Framework (Message Monitoring)

Security Advisory

_{Related note}
3312733

_CVSS
6.8

_{Affected system
type}
Java

_Patchday
2023-04

_{Released
on}
2023/04/11

Description
[CVE-2023-26458] Information Disclosure vulnerability in SAP Landscape Management

Security Advisory

_{Related note}
3316509

_CVSS
4.7

_{Affected system
type}
SAP Commerce

_Patchday
2023-04

_{Released
on}
2023/04/11

Description
Remote Code Execution vulnerability in SAP Commerce

Security Advisory

_{Related note}
3305907

_CVSS
8.7

_{Affected system
type}
ABAP

_Patchday
2023-04

_{Released
on}
2023/04/11

Description
[CVE-2023-29186] Directory Traversal vulnerability in SAP NetWeaver ( BI CONT ADD ON)

Security Advisory

_{Related note}
3115598

_CVSS
4.4

_{Affected system
type}
ABAP

_Patchday
2023-04

_{Released
on}
2023/04/11

Description
[CVE-2023-29109] Code Injection vulnerability in SAP Application Interface Framework (Message Dashboard)

Security Advisory

_{Related note}
3113349

_CVSS
3.7

_{Affected system
type}
ABAP

_Patchday
2023-04

_{Released
on}
2023/04/11

Description
[CVE-2023-29110] Code Injection vulnerability in SAP Application Interface Framework (Message Dashboard)

Security Advisory

_{Related note}
3311624

_CVSS
6.7

_{Affected system
type}
SAP GUI / Frontend

_Patchday
2023-04

_{Released
on}
2023/04/11

Description
[CVE-2023-29187] DLL Hijacking vulnerability in SapSetup (Software Installation Program)

Security Advisory

_{Related note}
3289994

_CVSS
6.5

_{Affected system
type}
Java

_Patchday
2023-04

_{Released
on}
2023/04/11

Description
[CVE-2023-28761] Missing Authentication check in SAP NetWeaver Enterprise Portal

Security Advisory

_{Related note}
3296378

_CVSS
6.5

_{Affected system
type}
ABAP

_Patchday
2023-04

_{Released
on}
2023/04/11

Description
[CVE-2023-28763] - Denial of Service in SAP NetWeaver AS for ABAP and ABAP Platform

Security Advisory

_{Related note}
3245526

_CVSS
9.9

_{Affected system
type}
BI/BO platform

_Patchday
2023-03

_{Released
on}
2023/03/14

Description
[CVE-2023-25616] Code Injection vulnerability in SAP Business Objects Business Intelligence Platform (CMC)

Security Advisory

_{Related note}
3289844

_CVSS
6.8

_{Affected system
type}
ABAP

_Patchday
2023-03

_{Released
on}
2023/03/14

Description
[CVE-2023-25615] SQL Injection vulnerability in SAP ABAP Platform

Security Advisory

_{Related note}
3296476

_CVSS
8.8

_{Affected system
type}
ABAP

_Patchday
2023-03

_{Released
on}
2023/03/14

Description
[CVE-2023-27893] Arbitrary Code Execution in SAP Solution Manager and ABAP managed systems (ST-PI)

Security Advisory

_{Related note}
3288394

_CVSS
5.3

_{Affected system
type}
Java

_Patchday
2023-03

_{Released
on}
2023/03/14

Description
[CVE-2023-24526] Improper Access Control in SAP NetWeaver AS Java (Classload Service)

Security Advisory

_{Related note}
3274920

_CVSS
6.1

_{Affected system
type}
ABAP

_Patchday
2023-03

_{Released
on}
2023/03/14

Description
[CVE-2023-0021] Cross-Site Scripting (XSS) vulnerability in SAP NetWeaver

Security Advisory

_{Related note}
3287120

_CVSS
6.5

_{Affected system
type}
BI/BO platform

_Patchday
2023-03

_{Released
on}
2023/03/14

Description
[Multiple CVEs] Multiple vulnerabilities in the SAP BusinessObjects Business Intelligence platform

Security Advisory

_{Related note}
3296346

_CVSS
7.4

_{Affected system
type}
ABAP

_Patchday
2023-03

_{Released
on}
2023/03/14

Description
[CVE-2023-26459] Multiple vulnerabilities in SAP NetWeaver AS for ABAP and ABAP Platform

Security Advisory

_{Related note}
3252433

_CVSS
9.9

_{Affected system
type}
Java

_Patchday
2023-03

_{Released
on}
2023/03/14

Description
[CVE-2023-23857] Improper Access Control in SAP NetWeaver AS for Java

Security Advisory

_{Related note}
3302162

_CVSS
9.6

_{Affected system
type}
ABAP

_Patchday
2023-03

_{Released
on}
2023/03/14

Description
[CVE-2023-27500] Directory Traversal vulnerability in SAP NetWeaver AS for ABAP and ABAP Platform

Security Advisory

_{Related note}
3294595

_CVSS
9.6

_{Affected system
type}
ABAP

_Patchday
2023-03

_{Released
on}
2023/03/14

Description
[CVE-2023-27269] Directory Traversal vulnerability in SAP NetWeaver AS for ABAP and ABAP Platform

Security Advisory

_{Related note}
3288096

_CVSS
5.3

_{Affected system
type}
Java

_Patchday
2023-03

_{Released
on}
2023/03/14

Description
[CVE-2023-26460] Improper Access Control in SAP NetWeaver AS Java (Cache Management Service)

Security Advisory

_{Related note}
3288480

_CVSS
5.3

_{Affected system
type}
Java

_Patchday
2023-03

_{Released
on}
2023/03/14

Description
[CVE-2023-27268] Improper Access Control in SAP NetWeaver AS Java (Object Analyzing Service)

Security Advisory

_{Related note}
3281484

_CVSS
6.1

_{Affected system
type}
ABAP

_Patchday
2023-03

_{Released
on}
2023/03/14

Description
[CVE-2023-26457] Cross-Site Scripting (XSS) vulnerability in SAP Content Server

Security Advisory

_{Related note}
3296328

_CVSS
6.5

_{Affected system
type}
ABAP

_Patchday
2023-03

_{Released
on}
2023/03/14

Description
[CVE-2023-27270] Denial of Service (DoS) in SAP NetWeaver AS for ABAP and ABAP Platform

Security Advisory

_{Related note}
3284550

_CVSS
6.8

_{Affected system
type}
Java

_Patchday
2023-03

_{Released
on}
2023/03/14

Description
[CVE-2023-26461] XML External Entity (XXE) vulnerability in SAP NetWeaver (SAP Enterprise Portal)

Security Advisory

_{Related note}
3275727

_CVSS
7.2

_{Affected system
type}
SAP Host Agent

_Patchday
2023-03

_{Released
on}
2023/03/14

Description
[CVE-2023-27498] Memory Corruption vulnerability in SAPOSCOL

Security Advisory

_{Related note}
3302710

_CVSS
6.1

_{Affected system
type}
SAP Authenticator for Android

_Patchday
2023-03

_{Released
on}
2023/03/14

Description
[CVE-2023-27895] Information Disclosure vulnerability in SAP Authenticator for Android

Security Advisory

_{Related note}
3283438

_CVSS
9.0

_{Affected system
type}
BI/BO platform

_Patchday
2023-03

_{Released
on}
2023/03/14

Description
[CVE-2023-25617] OS Command Execution vulnerability in SAP Business Objects Business Intelligence Platform (Adaptive Job Server)

Security Advisory

_{Related note}
3294954

_CVSS
8.7

_{Affected system
type}
ABAP

_Patchday
2023-03

_{Released
on}
2023/03/14

Description
[CVE-2023-27501] Directory Traversal vulnerability in SAP NetWeaver AS for ABAP and ABAP Platform

Security Advisory

_{Related note}
2985905

_CVSS
6.5

_{Affected system
type}
ABAP

_Patchday
2023-02

_{Released
on}
2023/02/14

Description
[CVE-2023-24524] Missing Authorization check in SAP S/4 HANA Map Treasury Correspondence Format Data

Security Advisory

_{Related note}
3270509

_CVSS
6.5

_{Affected system
type}
ABAP

_Patchday
2023-02

_{Released
on}
2023/02/14

Description
[CVE-2023-23855] URL Redirection vulnerability in SAP Solution Manager

Security Advisory

_{Related note}
3290901

_CVSS
6.5

_{Affected system
type}
ABAP

_Patchday
2023-02

_{Released
on}
2023/02/14

Description
[CVE-2023-24528] Missing Authorization Check in SAP Fiori apps for Travel Management in SAP ERP (My Travel Requests)

Security Advisory

_{Related note}
3287291

_CVSS
3.8

_{Affected system
type}
ABAP

_Patchday
2023-02

_{Released
on}
2023/02/14

Description
[CVE-2023-23854] Missing Authorization check in SAP NetWeaver AS ABAP and ABAP Platform

Security Advisory

_{Related note}
3265846

_CVSS
6.5

_{Affected system
type}
ABAP

_Patchday
2023-02

_{Released
on}
2023/02/14

Description
[CVE-2023-0024] Cross Site Scripting in SAP Solution Manager (BSP Application)

Security Advisory

_{Related note}
3256787

_CVSS
8.4

_{Affected system
type}
BI/BO platform

_Patchday
2023-02

_{Released
on}
2023/02/14

Description
[CVE-2023-24530] Unrestricted Upload of File in SAP BusinessObjects Business Intelligence Platform (CMC)

Security Advisory

_{Related note}
3285757

_CVSS
8.8

_{Affected system
type}
SAP Host Agent

_Patchday
2023-02

_{Released
on}
2023/02/14

Description
[CVE-2023-24523] Privilege Escalation vulnerability in SAP Host Agent (Start Service)

Security Advisory

_{Related note}
3271227

_CVSS
6.1

_{Affected system
type}
ABAP

_Patchday
2023-02

_{Released
on}
2023/02/14

Description
[CVE-2023-23853] URL Redirection vulnerability in SAP NetWeaver Application Server for ABAP and ABAP Platform

Security Advisory

_{Related note}
3293786

_CVSS
6.1

_{Affected system
type}
ABAP

_Patchday
2023-02

_{Released
on}
2023/02/14

Description
[CVE-2023-23858] Cross-Site Scripting (XSS) vulnerability in SAP NetWeaver AS for ABAP and ABAP Platform

Security Advisory

_{Related note}
3269118

_CVSS
6.1

_{Affected system
type}
ABAP

_Patchday
2023-02

_{Released
on}
2023/02/14

Description
[CVE-2023-24522] Cross-Site Scripting (XSS) vulnerability in SAP NetWeaver AS ABAP (BSP Framework)

Security Advisory

_{Related note}
3269151

_CVSS
6.1

_{Affected system
type}
ABAP

_Patchday
2023-02

_{Released
on}
2023/02/14

Description
[CVE-2023-24521] Cross-Site Scripting (XSS) vulnerability in SAP NetWeaver AS ABAP (BSP Framework)

Security Advisory

_{Related note}
3267442

_CVSS
6.5

_{Affected system
type}
ABAP

_Patchday
2023-02

_{Released
on}
2023/02/14

Description
[CVE-2023-0025] Cross Site Scripting in SAP Solution Manager (BSP Application)

Security Advisory

_{Related note}
3282663

_CVSS
6.1

_{Affected system
type}
ABAP

_Patchday
2023-02

_{Released
on}
2023/02/14

Description
[CVE-2023-24529] Cross-Site Scripting (XSS) vulnerability in SAP NetWeaver AS ABAP (Business Server Pages application)

Security Advisory

_{Related note}
3268959

_CVSS
6.1

_{Affected system
type}
ABAP

_Patchday
2023-02

_{Released
on}
2023/02/14

Description
[Multiple CVEs] Multiple vulnerabilities in SAP NetWeaver AS for ABAP and ABAP Platform

Security Advisory

_{Related note}
3281724

_CVSS
6.5

_{Affected system
type}
ABAP

_Patchday
2023-02

_{Released
on}
2023/02/14

Description
[CVE-2023-0019] Missing Authorization check in SAP GRC (Process Control)

Security Advisory

_{Related note}
3266751

_CVSS
6.1

_{Affected system
type}
ABAP

_Patchday
2023-02

_{Released
on}
2023/02/14

Description
[CVE-2023-23852] Cross-Site Scripting (XSS) vulnerability in SAP Solution Manager 7.2

Security Advisory

_{Related note}
3275841

_CVSS
5.4

_{Affected system
type}
ABAP

_Patchday
2023-02

_{Released
on}
2023/02/14

Description
[CVE-2023-23851] Unrestricted File Upload in SAP Business Planning and Consolidation

Security Advisory

_{Related note}
3263135

_CVSS
8.5

_{Affected system
type}
BI/BO platform

_Patchday
2023-02

_{Released
on}
2023/02/14

Description
[CVE-2023-0020] Information disclosure vulnerability in SAP BusinessObjects Business Intelligence platform

Security Advisory

_{Related note}
3263863

_CVSS
4.3

_{Affected system
type}
BI/BO platform

_Patchday
2023-02

_{Released
on}
2023/02/14

Description
[CVE-2023-23856] Cross-Site Scripting (XSS) vulnerability in Web Intelligence Interface

Security Advisory

_{Related note}
3274585

_CVSS
6.1

_{Affected system
type}
ABAP

_Patchday
2023-02

_{Released
on}
2023/02/14

Description
[CVE-2023-25614] Cross-Site Scripting (XSS) vulnerability in SAP NetWeaver AS ABAP (BSP Framework)

Security Advisory

_{Related note}
2788178

_CVSS
4.3

_{Affected system
type}
ABAP

_Patchday
2023-02

_{Released
on}
2023/02/14

Description
[CVE-2023-24525] Cross-Site Scripting (XSS) vulnerability in SAP CRM WebClient UI

Security Advisory

_{Related note}
3276120

_CVSS
6.4

_{Affected system
type}
SAP Host Agent

_Patchday
2023-01

_{Released
on}
2023/01/10

Description
[CVE-2023-0012] Local Privilege Escalation in SAP Host Agent (Windows)

Security Advisory

_{Related note}
3089413

_CVSS
9.0

_{Affected system
type}
Kernel / ABAP

_Patchday
2023-01

_{Released
on}
2023/01/10

Description
[CVE-2023-0014] Capture-replay vulnerability in SAP NetWeaver AS for ABAP and ABAP Platform

Security Advisory

_{Related note}
3150704

_CVSS
4.5

_{Affected system
type}
ABAP

_Patchday
2023-01

_{Released
on}
2023/01/10

Description
[CVE-2023-0023] Information Disclosure in SAP Bank Account Management (Manage Banks)

Security Advisory

_{Related note}
3266006

_CVSS
5.4

_{Affected system
type}
BI/BO platform

_Patchday
2023-01

_{Released
on}
2023/01/10

Description
[CVE-2023-0018] Cross-Site Scripting (XSS) vulnerability in SAP BusinessObjects Business Intelligence Platform (Central management console)

Security Advisory

_{Related note}
3262810

_CVSS
9.9

_{Affected system
type}
BI/BO platform

_Patchday
2023-01

_{Released
on}
2023/01/10

Description
[CVE-2023-0022] Code Injection vulnerability in SAP BusinessObjects Business Intelligence platform (Analysis edition for OLAP)

Security Advisory

_{Related note}
3275391

_CVSS
9.9

_{Affected system
type}
SAP Business Planning...

_Patchday
2023-01

_{Released
on}
2023/01/10

Description
[CVE-2023-0016] SQL Injection vulnerability in SAP Business Planning and Consolidation MS

Security Advisory

_{Related note}
3283283

_CVSS
6.1

_{Affected system
type}
ABAP

_Patchday
2023-01

_{Released
on}
2023/01/10

Description
[CVE-2023-0013] Cross-Site Scripting (XSS) vulnerability in SAP NetWeaver AS for ABAP and ABAP Platform

Security Advisory

_{Related note}
3251447

_CVSS
4.6

_{Affected system
type}
BI/BO platform

_Patchday
2023-01

_{Released
on}
2023/01/10

Description
[CVE-2023-0015] Cross-Site Scripting (XSS) vulnerability in SAP BusinessObjects Business Intelligence (Web Intelligence)

Security Advisory

_{Related note}
3268093

_CVSS
9.4

_{Affected system
type}
Java

_Patchday
2023-01

_{Released
on}
2023/01/10

Description
[CVE-2023-0017] Improper access control in SAP NetWeaver AS for Java

Security Advisory

_{Related note}
3271313

_CVSS
6.1

_{Affected system
type}
ABAP

_Patchday
2022-12

_{Released
on}
2022/12/13

Description
[CVE-2022-41275] Offener Redirect in SAP Solutions Manager (Enterprise Search)

Security Advisory

_{Related note}
3248255

_CVSS
8.0

_{Affected system
type}
SAP Commerce

_Patchday
2022-12

_{Released
on}
2022/12/13

Description
[CVE-2022-41266] Cross-Site Scripting (XSS) vulnerability in SAP Commerce

Security Advisory

_{Related note}
3268172

_CVSS
8.8

_{Affected system
type}
ABAP

_Patchday
2022-12

_{Released
on}
2022/12/13

Description
[CVE-2022-41264] Code Injection vulnerability in SAP BASIS

Security Advisory

_{Related note}
3262544

_CVSS
6.1

_{Affected system
type}
Java

_Patchday
2022-12

_{Released
on}
2022/12/13

Description
[CVE-2022-41262] Cross-Site Scripting (XSS) vulnerability in SAP NetWeaver AS for Java (Http Provider Service)

Security Advisory

_{Related note}
3258950

_CVSS
6.1

_{Affected system
type}
ABAP

_Patchday
2022-12

_{Released
on}
2022/12/13

Description
Update 1 to Security Note 2872782 - [CVE-2020-6215] URL Redirection vulnerability in SAP NetWeaver AS ABAP (BSP Test Application)

Security Advisory

_{Related note}
3273480

_CVSS
9.9

_{Affected system
type}
Java

_Patchday
2022-12

_{Released
on}
2022/12/13

Description
[CVE-2022-41272] Improper access control in SAP NetWeaver AS Java (User Defined Search)

Security Advisory

_{Related note}
3271091

_CVSS
8.5

_{Affected system
type}
ABAP

_Patchday
2022-12

_{Released
on}
2022/12/13

Description
[CVE-2022-41268] Privilege escalation vulnerability in SAP Business Planning and Consolidation

Security Advisory

_{Related note}
3239475

_CVSS
9.9

_{Affected system
type}
BI/BO platform

_Patchday
2022-12

_{Released
on}
2022/12/13

Description
[CVE-2022-41267] Server-Side Request Forgery vulnerability in SAP BusinessObjects Business Intelligence Platform

Security Advisory

_{Related note}
3267780

_CVSS
9.4

_{Affected system
type}
Java

_Patchday
2022-12

_{Released
on}
2022/12/13

Description
[CVE-2022-41271] Improper access control in SAP NetWeaver AS Java (Messaging System)

Security Advisory

_{Related note}
3271523

_CVSS
9.8

_{Affected system
type}
SAP Commerce

_Patchday
2022-12

_{Released
on}
2022/12/13

Description
Remote Code Execution vulnerability associated with Apache Commons Text in SAP Commerce

Security Advisory

_{Related note}
3265173

_CVSS
6.0

_{Affected system
type}
Java

_Patchday
2022-12

_{Released
on}
2022/12/13

Description
[CVE-2022-41261] Improper Access Control in SAP Solution Manager (Diagnostic Agent)

Security Advisory

_{Related note}
3270399

_CVSS
4.3

_{Affected system
type}
Java

_Patchday
2022-12

_{Released
on}
2022/12/13

Description
[CVE-2022-41273] URL Redirection vulnerability in SAP Sourcing and SAP Contract Lifecycle Management

Security Advisory

_{Related note}
3266846

_CVSS
6.5

_{Affected system
type}
SAP Disclosure Management

_Patchday
2022-12

_{Released
on}
2022/12/13

Description
[CVE-2022-41274] Missing Authorization Checks in SAP Disclosure Management

Security Advisory

_{Related note}
3249648

_CVSS
4.3

_{Affected system
type}
BI/BO platform

_Patchday
2022-12

_{Released
on}
2022/12/13

Description
[CVE-2022-41263] Missing authentication check vulnerability in SAP Business Objects Business Intelligence Platform (Web intelligence)

Security Advisory

_{Related note}
3238042

_CVSS
6.1

_{Affected system
type}
Java

_Patchday
2022-11

_{Released
on}
2022/11/08

Description
[CVE-2022-41207] URL Redirection vulnerability in SAP Biller Direct

Security Advisory

_{Related note}
3256571

_CVSS
8.7

_{Affected system
type}
ABAP

_Patchday
2022-11

_{Released
on}
2022/11/08

Description
[CVE-2022-41214] Multiple vulnerabilities in SAP NetWeaver Application Server ABAP and ABAP Platform

Security Advisory

_{Related note}
3218159

_CVSS
6.1

_{Affected system
type}
SAP UI5 SAP Fiori

_Patchday
2022-11

_{Released
on}
2022/11/08

Description
Insufficient Session Expiration in Central Fiori Launchpad

Security Advisory

_{Related note}
3251202

_CVSS
4.7

_{Affected system
type}
ABAP

_Patchday
2022-11

_{Released
on}
2022/11/08

Description
[CVE-2022-41215] URL Redirection vulnerability in SAP NetWeaver ABAP Server and ABAP Platform

Security Advisory

_{Related note}
3249990

_CVSS
9.8

_{Affected system
type}
ABAP, Java

_Patchday
2022-11

_{Released
on}
2022/11/08

Description
[CVE-2021-20223] Multiple Vulnerabilities in SQlite bundled with SAPUI5

Security Advisory

_{Related note}
3229987

_CVSS
6.5

_{Affected system
type}
Sybase platform

_Patchday
2022-11

_{Released
on}
2022/11/08

Description
[CVE-2022-41259] Denial of service (DOS) in SAP SQL Anywhere

Security Advisory

_{Related note}
3237251

_CVSS
5.5

_{Affected system
type}
SAP GUI

_Patchday
2022-11

_{Released
on}
2022/11/08

Description
[CVE-2022-41205] Code injection vulnerability in SAP GUI for Windows

Security Advisory

_{Related note}
3260708

_CVSS
6.5

_{Affected system
type}
SAP Financial Consolidation

_Patchday
2022-11

_{Released
on}
2022/11/08

Description
[CVE-2022-41258] Multiple Cross-Site Scripting (XSS) vulnerabilities in SAP Financial Consolidation

Security Advisory

_{Related note}
3243924

_CVSS
9.9

_{Affected system
type}
BI/BO platform

Exploit available

_Patchday
2022-11

_{Released
on}
2022/11/08

Description
[CVE-2022-41203] Insecure Deserialization of Untrusted Data in SAP BusinessObjects Business Intelligence Platform (Central Management Console and BI Launchpad)

Security Advisory

_{Related note}
3263436

_CVSS
7.0

_{Affected system
type}
SAP 3D Visual Enterprise

_Patchday
2022-11

_{Released
on}
2022/11/08

Description
[CVE-2022-41211] Arbitrary Code Execution vulnerability in SAP 3D Visual Enterprise Author and SAP 3D Visual Enterprise Viewer

Security Advisory

_{Related note}
3229132

_CVSS
8.2

_{Affected system
type}
BI/BO platform

_Patchday
2022-10

_{Released
on}
2022/10/11

Description
[CVE-2022-39013] Information Disclosure vulnerability in SAP BusinessObjects Business Intelligence Platform (Program Objects)

Security Advisory

_{Related note}
3229425

_CVSS
5.4

_{Affected system
type}
BI/BO platform

_Patchday
2022-10

_{Released
on}
2022/10/11

Description
[CVE-2022-41206] Cross-Site Scripting (XSS) vulnerability in SAP BusinessObjects Business Intelligence platform / Analysis for OLAP

Security Advisory

_{Related note}
3239293

_CVSS
7.7

_{Affected system
type}
BI/BO platform

_Patchday
2022-10

_{Released
on}
2022/10/11

Description
[CVE-2022-39015] Information Disclosure vulnerability in SAP BusinessObjects Business Intelligence Platform(AdminTools/ Query Builder)

Security Advisory

_{Related note}
3245929

_CVSS
7.0

_{Affected system
type}
SAP 3D Visual Enterprise

_Patchday
2022-10

_{Released
on}
2022/10/11

Description
[Multiple CVEs] Multiple vulnerabilities in SAP 3D Visual Enterprise Author

Security Advisory

_{Related note}
3248970

_CVSS
4.9

_{Affected system
type}
SAP Customer Data Cloud

_Patchday
2022-10

_{Released
on}
2022/10/11

Description
[CVE-2022-41209] Information Disclosure Vulnerability in SAP Customer Data Cloud (Gigya)

Security Advisory

_{Related note}
3233226

_CVSS
6.8

_{Affected system
type}
BI/BO platform

_Patchday
2022-10

_{Released
on}
2022/10/11

Description
[CVE-2022-35296] Information Disclosure vulnerability in SAP BusinessObjects Business Intelligence Platform (Version Management System)

Security Advisory

_{Related note}
3202523

_CVSS
6.1

_{Affected system
type}
SAP Commerce

_Patchday
2022-10

_{Released
on}
2022/10/11

Description
Cross-Site Scripting (XSS) vulnerability in SAP Commerce

Security Advisory

_{Related note}
3234755

_CVSS
4.3

_{Affected system
type}
ABAP

_Patchday
2022-10

_{Released
on}
2022/10/11

Description
Information Disclosure vulnerability in Master Data Governance

Security Advisory

_{Related note}
3049899

_CVSS
6.5

_{Affected system
type}
SAP Enable Now

_Patchday
2022-10

_{Released
on}
2022/10/11

Description
[CVE-2022-35297] Stored Cross-Site Scripting (XSS) vulnerability in SAP Enable Now

Security Advisory

_{Related note}
3248384

_CVSS
4.9

_{Affected system
type}
SAP Customer Data Cloud

_Patchday
2022-10

_{Released
on}
2022/10/11

Description
[CVE-2022-41210] Information Disclosure Vulnerability in SAP Customer Data Cloud (Gigya)

Security Advisory

_{Related note}
3167342

_CVSS
4.8

_{Affected system
type}
BI/BO platform

_Patchday
2022-10

_{Released
on}
2022/10/11

Description
[CVE-2022-35226] Cross-Site Scripting (XSS) vulnerability in Data Services Management Console

Security Advisory

_{Related note}
3245928

_CVSS
7.0

_{Affected system
type}
SAP 3D Visual Enterprise

_Patchday
2022-10

_{Released
on}
2022/10/11

Description
[Multiple CVEs] Multiple vulnerabilities in SAP 3D Visual Enterprise Viewer

Security Advisory

_{Related note}
3242933

_CVSS
9.9

_{Affected system
type}
Java

_Patchday
2022-10

_{Released
on}
2022/10/11

Description
[CVE-2022-39802] File path traversal vulnerability in SAP Manufacturing Execution

Security Advisory

_{Related note}
2495712

_CVSS
6.5

_{Affected system
type}
ABAP

_Patchday
2022-10

_{Released
on}
2022/10/11

Description
Missing authorization check in SAP Automotive Solutions

Security Advisory

_{Related note}
3211161

_CVSS
6.1

_{Affected system
type}
BI/BO platform

_Patchday
2022-10

_{Released
on}
2022/10/11

Description
[CVE-2022-39800] Cross-Site Scripting (XSS) vulnerability in SAP BusinessObjects Business Intelligence Platform (BI LaunchPad)

Security Advisory

_{Related note}
3232021

_CVSS
8.1

_{Affected system
type}
Sybase platform

_Patchday
2022-10

_{Released
on}
2022/10/11

Description
[CVE-2022-35299] Buffer Overflow in SAP SQL Anywhere and SAP IQ

Security Advisory

_{Related note}
3159736

_CVSS
6.7

_{Affected system
type}
SAP Host Agent

_Patchday
2022-09

_{Released
on}
2022/09/13

Description
[CVE-2022-35295] Privilege Escalation Vulnerability in SAPOSCOL on Unix

Security Advisory

_{Related note}
3219164

_CVSS
6.1

_{Affected system
type}
Java

_Patchday
2022-09

_{Released
on}
2022/09/13

Description
[CVE-2022-35298] Cross-Site Scripting (XSS) vulnerability in SAP NetWeaver Enterprise Portal (KMC)

Security Advisory

_{Related note}
3218177

_CVSS
5.4

_{Affected system
type}
ABAP

_Patchday
2022-09

_{Released
on}
2022/09/13

Description
[CVE-2022-35294] Cross-Site Scripting (XSS) vulnerability in SAP NetWeaver Application Server ABAP

Security Advisory

_{Related note}
3229820

_CVSS
6.1

_{Affected system
type}
ABAP

_Patchday
2022-09

_{Released
on}
2022/09/13

Description
[CVE-2022-39799] Cross-Site Scripting (XSS) vulnerability in SAP NetWeaver AS ABAP (SAP GUI for HTML within the Fiori Launchpad)

Security Advisory

_{Related note}
3223392

_CVSS
7.8

_{Affected system
type}
SAP Business One

_Patchday
2022-09

_{Released
on}
2022/09/13

Description
[CVE-2022-35292] Windows Unquoted Service Path issue in SAP Business One

Security Advisory

_{Related note}
3217303

_CVSS
7.7

_{Affected system
type}
BI/BO platform

_Patchday
2022-09

_{Released
on}
2022/09/13

Description
[CVE-2022-39014] Information Disclosure vulnerability in SAP BusinessObjects Business Intelligence Platform (CMC)

Security Advisory

_{Related note}
2634023

_CVSS
6.3

_{Affected system
type}
ABAP

_Patchday
2022-09

_{Released
on}
2022/09/13

Description
Missing authorization check in Consumption of CDS Views (or) OData Services in QM-QN

Security Advisory

_{Related note}
3198137

_CVSS
4.7

_{Affected system
type}
ABAP

_Patchday
2022-09

_{Released
on}
2022/09/13

Description
Update 1 to Security Note 3165333 - [CVE-2022-28215] URL Redirection vulnerability in SAP NetWeaver ABAP Server and ABAP Platform

Security Advisory

_{Related note}
3126968

_CVSS
4.3

_{Affected system
type}
ABAP

_Patchday
2022-09

_{Released
on}
2022/09/13

Description
Information Disclosure vulnerability in SAP CRM WebClient

Security Advisory

_{Related note}
3237075

_CVSS
7.1

_{Affected system
type}
ABAP

_Patchday
2022-09

_{Released
on}
2022/09/13

Description
[CVE-2022-39801] Insufficient Firefighter Session Expiration in SAP GRC Access Control Emergency Access Management

Security Advisory

_{Related note}
3216653

_CVSS
5.3

_{Affected system
type}
SAP Authenticator for Android

_Patchday
2022-08

_{Released
on}
2022/08/09

Description
[CVE-2022-35290] Information Disclosure in SAP Authenticator for Android

Security Advisory

_{Related note}
3213141

_CVSS
7.3

_{Affected system
type}
SAP Landscape...

_Patchday
2022-08

_{Released
on}
2022/07/26

Description
Information Disclosure in SAP Landscape Management

Security Advisory

_{Related note}
3213507

_CVSS
5.2

_{Affected system
type}
BI/BO platform

_Patchday
2022-08

_{Released
on}
2022/08/09

Description
[CVE-2022-31596] Information Disclosure vulnerability in SAP BusinessObjects Business Intelligence Platform (Monitoring DB)

Security Advisory

_{Related note}
3210823

_CVSS
8.2

_{Affected system
type}
BI/BO platform

_Patchday
2022-08

_{Released
on}
2022/08/09

Description
[CVE-2022-32245] Information disclosure vulnerability in SAP BusinessObjects Business Intelligence Platform (Open Document)

Security Advisory

_{Related note}
3213524

_CVSS
5.2

_{Affected system
type}
BI/BO platform

_Patchday
2022-08

_{Released
on}
2022/08/09

Description
[CVE-2022-32244] Information Disclosure vulnerability in SAP BusinessObjects Business Intelligence Platform (Commentary DB)

Security Advisory

_{Related note}
2522794

_CVSS
6.3

_{Affected system
type}
ABAP

_Patchday
2022-08

_{Released
on}
2022/08/09

Description
Missing Authorization check in Portugal Digital Signature

Security Advisory

_{Related note}
3210566

_CVSS
4.2

_{Affected system
type}
SAP Enable Now

_Patchday
2022-08

_{Released
on}
2022/08/09

Description
[CVE-2022-35293] Missing authorization check in SAP Enable Now Manager

Security Advisory

_{Related note}
3156484

_CVSS
6.5

_{Affected system
type}
SAP GUI / Frontend

_Patchday
2022-08

_{Released
on}
2022/08/09

Description
Information Disclosure vulnerability in SAP Business Client

Security Advisory

_{Related note}
3208819

_CVSS
6.1

_{Affected system
type}
Java

_Patchday
2022-07

_{Released
on}
2022/07/12

Description
[CVE-2022-35170] Cross-Site Scripting (XSS) vulnerability in SAP NetWeaver Enterprise Portal

Security Advisory

_{Related note}
3207902

_CVSS
6.1

_{Affected system
type}
Java

_Patchday
2022-07

_{Released
on}
2022/07/12

Description
[CVE-2022-35172] Cross-Site Scripting (XSS) vulnerability in SAP NetWeaver Enterprise Portal

Security Advisory

_{Related note}
3208880

_CVSS
6.1

_{Affected system
type}
Java

_Patchday
2022-07

_{Released
on}
2022/07/12

Description
[CVE-2022-35225] Cross-Site Scripting (XSS) vulnerability in SAP NetWeaver Enterprise Portal

Security Advisory

_{Related note}
3150454

_CVSS
4.9

_{Affected system
type}
ABAP

_Patchday
2022-07

_{Released
on}
2022/07/12

Description
Information Disclosure vulnerability in SAP NetWeaver Application Server ABAP and ABAP Platform

Security Advisory

_{Related note}
3221288

_CVSS
8.3

_{Affected system
type}
BI/BO platform

_Patchday
2022-07

_{Released
on}
2022/07/12

Description
[CVE-2022-35228] Information disclosure vulnerability in SAP BusinessObjects Business Intelligence Platform (Central management console)

Security Advisory

_{Related note}
3157613

_CVSS
7.5

_{Affected system
type}
SAP Business One

_Patchday
2022-07

_{Released
on}
2022/07/12

Description
[CVE-2022-28771] Missing Authentication check in SAP Business One (License service API)

Security Advisory

_{Related note}
3210779

_CVSS
6.1

_{Affected system
type}
Java

_Patchday
2022-07

_{Released
on}
2022/07/12

Description
[CVE-2022-35224] Cross-Site Scripting (XSS) vulnerability in SAP Enterprise Portal

Security Advisory

_{Related note}
3220746

_CVSS
3.3

_{Affected system
type}
SAP 3D Visual Enterprise

_Patchday
2022-07

_{Released
on}
2022/07/12

Description
[CVE-2022-35171] Improper Input Validation in SAP 3D Visual Enterprise Viewer

Security Advisory

_{Related note}
3209557

_CVSS
6.1

_{Affected system
type}
Java

_Patchday
2022-07

_{Released
on}
2022/07/12

Description
[CVE-2022-32247] Cross-Site Scripting (XSS) vulnerability in SAP NetWeaver Enterprise Portal

Security Advisory

_{Related note}
3213826

_CVSS
5.4

_{Affected system
type}
ABAP

_Patchday
2022-07

_{Released
on}
2022/07/12

Description
[CVE-2022-31597] Missing Authorization check in SAP S/4HANA(business partner extension for Spain/Slovakia)

Security Advisory

_{Related note}
3213279

_CVSS
5.4

_{Affected system
type}
BI/BO platform

_Patchday
2022-07

_{Released
on}
2022/07/12

Description
[CVE-2022-31598] Cross-Site Scripting (XSS) vulnerability in SAP Business Objects

Security Advisory

_{Related note}
3212997

_CVSS
7.6

_{Affected system
type}
SAP Business One

_Patchday
2022-07

_{Released
on}
2022/07/12

Description
[CVE-2022-32249] Information Disclosure vulnerability in SAP Business One

Security Advisory

_{Related note}
3191012

_CVSS
7.4

_{Affected system
type}
SAP Business One

_Patchday
2022-07

_{Released
on}
2022/07/12

Description
[CVE-2022-31593] Code Injection vulnerability in SAP Business One

Security Advisory

_{Related note}
3150463

_CVSS
4.9

_{Affected system
type}
ABAP

_Patchday
2022-07

_{Released
on}
2022/07/12

Description
Information Disclosure vulnerability in ABAP Platform

Security Advisory

_{Related note}
3203079

_CVSS
5.4

_{Affected system
type}
BI/BO platform

_Patchday
2022-07

_{Released
on}
2022/07/12

Description
[CVE-2022-32246] SQL Injection vulnerability in SAP BusinessObjects Business Intelligence Platform (Visual Difference Application)

Security Advisory

_{Related note}
3194361

_CVSS
6.0

_{Affected system
type}
BI/BO platform

_Patchday
2022-07

_{Released
on}
2022/07/12

Description
[CVE-2022-35169] Information Disclosure vulnerability in SAP BusinessObjects Business Intelligence Platform (LCM)

Security Advisory

_{Related note}
3167430

_CVSS
5.6

_{Affected system
type}
BI/BO platform

_Patchday
2022-07

_{Released
on}
2022/07/12

Description
[CVE-2022-31591] Privilege Escalation vulnerability in SAP BusinessObjects (BW Publisher Service)

Security Advisory

_{Related note}
3211203

_CVSS
4.3

_{Affected system
type}
SAP Business One

_Patchday
2022-07

_{Released
on}
2022/07/12

Description
[CVE-2022-35168] Denial of Service vulnerability in SAP Business One

Security Advisory

Notifications

Security Advisories

Severity

SAP© Security advisories 667

System Types

Affected SAP© system types

Related note 3328495

CVSS 9.8

Affected system type Reprise License Manager

Patchday2023-05

Released on2023/05/09

Related note 3315979

CVSS 5.4

Affected system type ABAP

Patchday2023-05

Released on2023/05/09

Related note 3312892

CVSS 5.4

Affected system type ABAP

Patchday2023-05

Released on2023/05/09

Related note 3315971

CVSS 6.1

Affected system type ABAP

Patchday2023-05

Released on2023/05/09

Related note 3309935

CVSS 6.1

Affected system type BI/BO platform

Patchday2023-05

Released on2023/05/09

Related note 3302595

CVSS 3.7

Affected system type BI/BO platform

Patchday2023-05

Released on2023/05/09

Related note 3313484

CVSS 6.3

Affected system type BI/BO platform

Patchday2023-05

Released on2023/05/09

Related note 3300624

CVSS 7.5

Affected system type SAP PowerDesigner

Patchday2023-05

Released on2023/05/09

Related note 3323415

CVSS 8.2

Affected system type SAP Integrated...

Patchday2023-05

Released on2023/05/09

Related note 3321309

CVSS 7.5

Affected system type SAP Commerce

Patchday2023-05

Released on2023/05/09

Related note 3038911

CVSS 5.0

Affected system type BI/BO platform

Patchday2023-05

Released on2023/05/09

Related note 3320467

CVSS 7.5

Affected system type SAP GUI / Frontend

Patchday2023-05

Released on2023/05/09

Related note 3307833

CVSS 9.1

Affected system type BI/BO platform

Patchday2023-05

Released on2023/05/09

Related note 3319400

CVSS 6.1

Affected system type BI/BO platform

Patchday2023-05

Released on2023/05/09

Related note 3317453

CVSS 8.2

Affected system type Java

Patchday2023-05

_{Related note}
3328495

_CVSS
9.8

_{Affected system
type}
Reprise License Manager

_Patchday
2023-05

_{Released
on}
2023/05/09

_{Related note}
3315979

_CVSS
5.4

_{Affected system
type}
ABAP

_Patchday
2023-05

_{Released
on}
2023/05/09

_{Related note}
3312892

_CVSS
5.4

_{Affected system
type}
ABAP

_Patchday
2023-05

_{Released
on}
2023/05/09

_{Related note}
3315971

_CVSS
6.1

_{Affected system
type}
ABAP

_Patchday
2023-05

_{Released
on}
2023/05/09

_{Related note}
3309935

_CVSS
6.1

_{Affected system
type}
BI/BO platform

_Patchday
2023-05

_{Released
on}
2023/05/09

_{Related note}
3302595

_CVSS
3.7

_{Affected system
type}
BI/BO platform

_Patchday
2023-05

_{Released
on}
2023/05/09

_{Related note}
3313484

_CVSS
6.3

_{Affected system
type}
BI/BO platform

_Patchday
2023-05

_{Released
on}
2023/05/09

_{Related note}
3300624

_CVSS
7.5

_{Affected system
type}
SAP PowerDesigner

_Patchday
2023-05

_{Released
on}
2023/05/09

_{Related note}
3323415

_CVSS
8.2

_{Affected system
type}
SAP Integrated...

_Patchday
2023-05

_{Released
on}
2023/05/09

_{Related note}
3321309

_CVSS
7.5

_{Affected system
type}
SAP Commerce

_Patchday
2023-05

_{Released
on}
2023/05/09

_{Related note}
3038911

_CVSS
5.0

_{Affected system
type}
BI/BO platform

_Patchday
2023-05

_{Released
on}
2023/05/09

_{Related note}
3320467

_CVSS
7.5

_{Affected system
type}
SAP GUI / Frontend

_Patchday
2023-05

_{Released
on}
2023/05/09

_{Related note}
3307833

_CVSS
9.1

_{Affected system
type}
BI/BO platform

_Patchday
2023-05

_{Released
on}
2023/05/09

_{Related note}
3319400

_CVSS
6.1

_{Affected system
type}
BI/BO platform

_Patchday
2023-05

_{Released
on}
2023/05/09

_{Related note}
3317453

_CVSS
8.2

_{Affected system
type}
Java

_Patchday
2023-05

_{Released
on}
2023/05/09

_{Related note}
3320145

_CVSS
7.5

_{Affected system
type}
SAP Commerce

_Patchday
2023-05

_{Released
on}
2023/05/09