We've created the first of its kind, SecurityBridge Cloud Platform, designed to prioritize SAP patches, updates, and remediation strategies that help prevent disruptions to critical business systems. Our security advisories provide SAP users with valuable insights into the security and business implications of operating SAP.

The user interface is designed to be as intuitive as possible, but we’d love to hear your feedback and suggestions.
We hope you enjoy using it!
× Yikes, there is work to do!
This time we found critical correction advisiories. We count 16 and the highest CVSS score is 10.0.

 

 Severity
SAP© Security advisories 16
 System Types
Affected SAP© system types

 

Related note
2938831
CVSS
6.0

Affected system type
ABAP
Patchday
2020-07
Released on
2020/06/23

Description
SESS: Duplicate AU3 entries in the Security Audit Log

 

Related note
2541823
CVSS
6.3

Affected system type
ABAP
Patchday
2020-07
Released on
2020/06/09

Description
Switchable authorization checks for RFC in SAP CRM (external billing)

 

Related note
2849967
CVSS
6.1

Affected system type
BI/BO platform
Patchday
2020-07
Released on
2020/07/14

Description
[CVE-2020-6276] Cross-Site Scripting (XSS) vulnerability in SAP Business Objects Business Intelligence Platform(Bipodata)

 

Related note
2874738
CVSS
3.8

Affected system type
ABAP
Patchday
2020-07
Released on
2020/07/14

Description
Missing Authorization Check in S4 ACR Brazil Option

 

Related note
2912708
CVSS
5.4

Affected system type
BI/BO platform
Patchday
2020-07
Released on
2020/07/14

Description
[CVE-2020-6278] Cross-Site Scripting (XSS) vulnerability in SAP Business Objects Business Intelligence Platform (BI Launchpad and CMC)

 

Related note
2917743
CVSS
6.1

Affected system type
BI/BO platform
Patchday
2020-07
Released on
2020/07/14

Description
[CVE-2020-6281] Cross-Site Scripting (XSS) vulnerability in SAP Business Objects Business Intelligence Platform(BI Launch pad)

 

Related note
2091403
CVSS
6.3

Affected system type
ABAP
Patchday
2020-07
Released on
2015/08/11

Description
Directory traversal in BC-MID-ICF

 

Related note
2603398
CVSS
6.3

Affected system type
ABAP
Patchday
2020-07
Released on
2020/07/14

Description
Missing authorization check in Allocation Management

 

Related note
2758000
CVSS
6.3

Affected system type
SAP Disclosure Management
Patchday
2020-07
Released on
2020/07/14

Description
[CVE-2020-6267] Multiple vulnerabilities in SAP Disclosure Management

 

Related note
2537961
CVSS
6.3

Affected system type
ABAP
Patchday
2020-07
Released on
2020/07/14

Description
Switchable Authorization checks for RFC in MM-PUR-GF

 

Related note
2847817
CVSS
4.3

Affected system type
ABAP
Patchday
2020-07
Released on
2020/07/14

Description
Missing Authorization check in Travel Management

 

Related note
2927373
CVSS
2.7

Affected system type
ABAP
Patchday
2020-07
Released on
2020/07/14

Description
[CVE-2020-6280] Information Disclosure in SAP NetWeaver (ABAP Server) and ABAP Platform

 

Related note
2934135
CVSS
10.0

Affected system type
Java
Exploit available
Patchday
2020-07
Released on
2020/07/14

Description
[CVE-2020-6287] Multiple Vulnerabilities in SAP NetWeaver AS JAVA (LM Configuration Wizard)

 

Related note
2896025
CVSS
5.8

Affected system type
Java
Patchday
2020-07
Released on
2020/07/14

Description
[CVE-2020-6282] Server-Side Request Forgery in SAP NetWeaver AS JAVA (IIOP service)

 

Related note
2486446
CVSS
6.3

Affected system type
ABAP
Patchday
2020-07
Released on
2020/07/14

Description
Missing Authorization check in Pricat Inbound and Pricat Outbound

 

Related note
2932473
CVSS
7.7

Affected system type
Java
Patchday
2020-07
Released on
2020/07/14

Description
[CVE-2020-6285] Information Disclosure in SAP NetWeaver (XMLToolkit for Java)

 

 
ABEX logo

SecurityBridge helps in prioritizing SAP patches, updates and the remediation strategies essential for preventing the disruption of vital business systems. We help businesses in making their SAP systems more secure.

SecurityBridge

© Copyright 2024 by SecurityBridge GmbH

v35.0