Security Advisories  

We've created the first of its kind, SecurityBridge Cloud Platform to prioritize SAP patches, updates and the remediation strategies essential for preventing the disruption of vital business systems. Our security advisories enable SAP users to understand the security and business implications of running SAP.

The user interface, is designed to be as intuitive as possible but we'd love to hear your feedback and opinions.
We hope you like it!
× Yikes, there is work to do!
This time we found critical correction advisiories. We count 14 and the highest CVSS score is 9.9.

 

 Severity
SAP© Security advisories 14
 System Types
Affected SAP© system types

 

Related note
3119365
CVSS
9.9

Affected system type
ABAP
Patchday
2021-12
Released on
2021/12/14

Description
[CVE-2021-44231] Code Injection vulnerability in SAP ABAP Server & ABAP Platform (Translation Tools)

 

Related note
3114134
CVSS
8.8

Affected system type
SAP Commerce
Patchday
2021-12
Released on
2021/12/14

Description
[CVE-2021-42064] SQL Injection vulnerability in SAP Commerce

 

Related note
3102769
CVSS
8.8

Affected system type
Java
Patchday
2021-12
Released on
2021/12/14

Description
[CVE-2021-42063] Cross-Site Scripting (XSS) vulnerability in SAP Knowledge Warehouse

 

Related note
3123196
CVSS
8.4

Affected system type
ABAP
Patchday
2021-12
Released on
2021/12/14

Description
[CVE-2021-44235] Code Injection vulnerability in utility class for SAP NetWeaver AS ABAP

 

Related note
3124094
CVSS
7.7

Affected system type
ABAP
Patchday
2021-12
Released on
2021/12/14

Description
[CVE-2021-44232] Directory Traversal vulnerability in SAF-T Framework

 

Related note
3113593
CVSS
7.5

Affected system type
SAP Commerce
Patchday
2021-12
Released on
2021/12/14

Description
Denial of service (DOS) in SAP Commerce

 

Related note
3107332
CVSS
6.6

Affected system type
SAP Landscape Management
Patchday
2021-12
Released on
2021/12/14

Description
Missing Authorization Check in SAP Landscape Management

 

Related note
2661033
CVSS
6.3

Affected system type
ABAP
Patchday
2021-12
Released on
2021/11/23

Description
Missing Authorization check in RFC enabled function modules in SRM

 

Related note
2460948
CVSS
5.3

Affected system type
ABAP
Patchday
2021-12
Released on
2021/11/23

Description
Missing Authorization Check in Vehicle Management System

 

Related note
2484231
CVSS
4.3

Affected system type
ABAP
Patchday
2021-12
Released on
2021/12/14

Description
Missing Authorization Check in DIMP Industry Solution (Equipment and Tools Management & Bills of Services)

 

Related note
3121165
CVSS
4.3

Affected system type
SAP 3D Visual Enterprise
Patchday
2021-12
Released on
2021/12/14

Description
[Multiple CVEs] Improper Input Validation in SAP 3D Visual Enterprise Viewer

 

Related note
3103677
CVSS
4.1

Affected system type
BI/BO platform
Patchday
2021-12
Released on
2021/12/14

Description
[CVE-2021-42061] Cross-Site Scripting (XSS) vulnerability in SAP BusinessObjects Business Intelligence platform (Web Intelligence)

 

Related note
3051005
CVSS
3.5

Affected system type
SAP UI5
Patchday
2021-12
Released on
2021/12/14

Description
Cross-Site Scripting (XSS) Vulnerability in SAP Fiori Launchpad

 

Related note
3080816
CVSS
2.4

Affected system type
ABAP
Patchday
2021-12
Released on
2021/12/14

Description
[CVE-2021-44233] Missing Authorization check in GRC Access Control

 

 
ABEX logo

SecurityBridge helps in prioritizing SAP patches, updates and the remediation strategies essential for preventing the disruption of vital business systems. We help businesses in making their SAP systems more secure.

SecurityBridge

© Copyright 2022 by SecurityBridge // NCMI GmbH