Security Advisories
We've created the first of its kind, SecurityBridge Cloud Platform to prioritize SAP patches, updates and the remediation strategies essential for preventing the disruption of vital business systems. Our security advisories enable SAP users to understand the security and business implications of running SAP.
We hope you like it!
We have found 9 security advices for you to review.
Severity
SAP© Security advisories 9
System Types
Affected SAP© system types
Affected system
type
ABAP
Patchday
2021-06
Released
on
2021/05/25
Description
Incomplete authorization checks for import of environmental data
Affected system
type
Java
Patchday
2021-06
Released
on
2021/06/08
Description
[CVE-2021-27635] Missing XML Validation in SAP NetWeaver AS for JAVA
Affected system
type
SAP Enable Now
Patchday
2021-06
Released
on
2021/06/08
Description
[CVE-2021-27637] Information Disclosure in SAP Enable Now (SAP Workforce Performance Builder - Manager)
Affected system
type
Internet Graphics Service
Patchday
2021-06
Released
on
2021/06/08
Description
[Multiple CVEs] Memory Corruption vulnerability in SAP Internet Graphics Service
Affected system
type
SAP Commerce Cloud
Patchday
2021-06
Released
on
2021/06/08
Description
[CVE-2021-33666] Cross-Site Scripting (XSS) in SAP Commerce Cloud
Affected system
type
Java
Patchday
2021-06
Released
on
2021/06/08
Description
[CVE-2021-27615] Cross-Site Scripting (XSS) vulnerability in SAP Manufacturing Execution
Affected system
type
ABAP
Patchday
2021-06
Released
on
2021/06/08
Description
[CVE-2021-33663] Plaintext Injection in SAP NetWeaver AS for ABAP
Affected system
type
ABAP
Patchday
2021-06
Released
on
2021/06/08
Description
[CVE-2021-33665] Cross-Site Scripting (XSS) vulnerability within SAP NetWeaver AS ABAP (Applications based on SAP GUI for HTML)
Affected system
type
ABAP
Patchday
2021-06
Released
on
2021/06/08
Description
[CVE-2021-33664] Cross-Site Scripting (XSS) vulnerability within SAP NetWeaver AS ABAP (Applications based on Web Dynpro ABAP)