Security Advisories

We've created the first of its kind, SecurityBridge ^{Cloud Platform} to prioritize SAP patches, updates and the remediation strategies essential for preventing the disruption of vital business systems. Our security advisories enable SAP users to understand the security and business implications of running SAP.

The user interface, is designed to be as intuitive as possible but we'd love to hear your feedback and opinions.
We hope you like it!

× Yikes, there is work to do!
This time we found critical correction advisiories. We count 13 and the highest CVSS score is 9.9.

Severity

SAP© Security advisories 13

System Types

Affected SAP© system types

_{Related note}
3000291

_CVSS
3.6

_{Affected system
type}
Analysis for Office

_Patchday
2021-01

_{Released
on}
2021/01/12

Description
[CVE-2021-21470] XML External Entity vulnerability in SAP EPM add-in

Security Advisory

_{Related note}
2986980

_CVSS
9.9

_{Affected system
type}
ABAP

_Patchday
2021-01

_{Released
on}
2021/01/12

Description
[CVE-2021-21465] Multiple vulnerabilities in SAP Business Warehouse (Database Interface)

Security Advisory

_{Related note}
2965154

_CVSS
5.4

_{Affected system
type}
BI/BO platform

_Patchday
2021-01

_{Released
on}
2021/01/12

Description
[CVE-2021-21447] Cross-Site Scripting (XSS) vulnerability in SAP BusinessObjects Business Intelligence Platform (Web Intelligence HTML interface)

Security Advisory

_{Related note}
2984034

_CVSS
5.4

_{Affected system
type}
SAP Commerce Cloud

_Patchday
2021-01

_{Released
on}
2021/01/12

Description
[CVE-2021-21445] Header Manipulation vulnerability in SAP Commerce Cloud

Security Advisory

_{Related note}
2992269

_CVSS
5.3

_{Affected system
type}
SAP GUI / Frontend

_Patchday
2021-01

_{Released
on}
2021/01/12

Description
[CVE-2021-21448] Information Disclosure in SAP GUI for Windows

Security Advisory

_{Related note}
2993032

_CVSS
5.3

_{Affected system
type}
Java

_Patchday
2021-01

_{Released
on}
2021/01/12

Description
[CVE-2021-21469] Information Disclosure in SAP NetWeaver Master Data Management

Security Advisory

_{Related note}
3008422

_CVSS
4.3

_{Affected system
type}
ABAP

_Patchday
2021-01

_{Released
on}
2021/01/12

Description
[CVE-2021-21467] Missing Authorization check in SAP Banking Services (Generic Market Data)

Security Advisory

_{Related note}
2665387

_CVSS
5.5

_{Affected system
type}
ABAP

_Patchday
2021-01

_{Released
on}
2021/01/12

Description
Cross-Site Request Forgery (CSRF) vulnerability in Cash Management

Security Advisory

_{Related note}
3001373

_CVSS
8.9

_{Affected system
type}
Cloud Foundry

_Patchday
2021-01

_{Released
on}
2020/12/22

Description
Information Disclosure in Central Order

Security Advisory

_{Related note}
2743329

_CVSS
6.3

_{Affected system
type}
ABAP

_Patchday
2021-01

_{Released
on}
2021/01/12

Description
Switchable authorization checks for RFC module in In-House-Cash.

Security Advisory

_{Related note}
3000306

_CVSS
7.5

_{Affected system
type}
ABAP

_Patchday
2021-01

_{Released
on}
2021/01/12

Description
[CVE-2021-21446] Denial of service (DOS) in SAP NetWeaver AS ABAP and ABAP Platform

Security Advisory

_{Related note}
2999854

_CVSS
9.9

_{Affected system
type}
ABAP

_Patchday
2021-01

_{Released
on}
2021/01/12

Description
[CVE-2021-21466] Code Injection in SAP Business Warehouse and SAP BW/4HANA

Security Advisory

_{Related note}
3002617

_CVSS
4.3

_{Affected system
type}
SAP 3D Visual Enterprise

_Patchday
2021-01

_{Released
on}
2021/01/12

Description
[Multiple CVEs] Improper Input Validation in SAP 3D Visual Enterprise Viewer

Security Advisory

Notifications

Security Advisories

Severity

SAP© Security advisories 13

System Types

Affected SAP© system types

Related note 3000291

CVSS 3.6

Affected system type Analysis for Office

Patchday2021-01

Released on2021/01/12

Related note 2986980

CVSS 9.9

Affected system type ABAP

Patchday2021-01

Released on2021/01/12

Related note 2965154

CVSS 5.4

Affected system type BI/BO platform

Patchday2021-01

Released on2021/01/12

Related note 2984034

CVSS 5.4

Affected system type SAP Commerce Cloud

Patchday2021-01

Released on2021/01/12

Related note 2992269

CVSS 5.3

Affected system type SAP GUI / Frontend

Patchday2021-01

Released on2021/01/12

Related note 2993032

CVSS 5.3

Affected system type Java

Patchday2021-01

Released on2021/01/12

Related note 3008422

CVSS 4.3

Affected system type ABAP

Patchday2021-01

Released on2021/01/12

Related note 2665387

CVSS 5.5

Affected system type ABAP

Patchday2021-01

Released on2021/01/12

Related note 3001373

CVSS 8.9

Affected system type Cloud Foundry

Patchday2021-01

Released on2020/12/22

Related note 2743329

CVSS 6.3

Affected system type ABAP

Patchday2021-01

Released on2021/01/12

Related note 3000306

CVSS 7.5

Affected system type ABAP

Patchday2021-01

Released on2021/01/12

Related note 2999854

CVSS 9.9

Affected system type ABAP

Patchday2021-01

Released on2021/01/12

Related note 3002617

CVSS 4.3

Affected system type SAP 3D Visual Enterprise

Patchday2021-01

Released on2021/01/12

_{Related note}
3000291

_CVSS
3.6

_{Affected system
type}
Analysis for Office

_Patchday
2021-01

_{Released
on}
2021/01/12

_{Related note}
2986980

_CVSS
9.9

_{Affected system
type}
ABAP

_Patchday
2021-01

_{Released
on}
2021/01/12

_{Related note}
2965154

_CVSS
5.4

_{Affected system
type}
BI/BO platform

_Patchday
2021-01

_{Released
on}
2021/01/12

_{Related note}
2984034

_CVSS
5.4

_{Affected system
type}
SAP Commerce Cloud

_Patchday
2021-01

_{Released
on}
2021/01/12

_{Related note}
2992269

_CVSS
5.3

_{Affected system
type}
SAP GUI / Frontend

_Patchday
2021-01

_{Released
on}
2021/01/12

_{Related note}
2993032

_CVSS
5.3

_{Affected system
type}
Java

_Patchday
2021-01

_{Released
on}
2021/01/12

_{Related note}
3008422

_CVSS
4.3

_{Affected system
type}
ABAP

_Patchday
2021-01

_{Released
on}
2021/01/12

_{Related note}
2665387

_CVSS
5.5

_{Affected system
type}
ABAP

_Patchday
2021-01

_{Released
on}
2021/01/12

_{Related note}
3001373

_CVSS
8.9

_{Affected system
type}
Cloud Foundry

_Patchday
2021-01

_{Released
on}
2020/12/22

_{Related note}
2743329

_CVSS
6.3

_{Affected system
type}
ABAP

_Patchday
2021-01

_{Released
on}
2021/01/12

_{Related note}
3000306

_CVSS
7.5

_{Affected system
type}
ABAP

_Patchday
2021-01

_{Released
on}
2021/01/12

_{Related note}
2999854

_CVSS
9.9

_{Affected system
type}
ABAP

_Patchday
2021-01

_{Released
on}
2021/01/12

_{Related note}
3002617

_CVSS
4.3

_{Affected system
type}
SAP 3D Visual Enterprise

_Patchday
2021-01

_{Released
on}
2021/01/12