Security Advisories

We've created the first of its kind, SecurityBridge ^{Cloud Platform} to prioritize SAP patches, updates and the remediation strategies essential for preventing the disruption of vital business systems. Our security advisories enable SAP users to understand the security and business implications of running SAP.

The user interface, is designed to be as intuitive as possible but we'd love to hear your feedback and opinions.
We hope you like it!

× Hey there! Glad you made it.
We have found 17 security advices for you to review.

Severity

SAP© Security advisories 17

System Types

Affected SAP© system types

_{Related note}
3148377

_CVSS
6.5

_{Affected system
type}
Java

_Patchday
2022-04

_{Released
on}
2022/04/12

Description
[CVE-2022-28217] Missing XML Validation vulnerability in SAP NW EP WPC

Security Advisory

_{Related note}
3055044

_CVSS
5.4

_{Affected system
type}
BI/BO platform

_Patchday
2022-04

_{Released
on}
2022/04/12

Description
[CVE-2022-28213] Missing XML Validation vulnerability in SAP BusinessObjects Business Intelligence Platform (dswsbobje - SOAP Web services)

Security Advisory

_{Related note}
3137191

_CVSS
6.8

_{Affected system
type}
BI/BO platform

_Patchday
2022-04

_{Released
on}
2022/04/12

Description
[CVE-2022-22541] Information Disclosure vulnerability in SAP BusinessObjects Platform

Security Advisory

_{Related note}
3163583

_CVSS
6.1

_{Affected system
type}
Java

_Patchday
2022-04

_{Released
on}
2022/04/12

Description
[CVE-2022-26105] Cross-Site Scripting (XSS) vulnerability in SAP NetWeaver Enterprise Portal

Security Advisory

_{Related note}
3148094

_CVSS
6.5

_{Affected system
type}
Sybase

_Patchday
2022-04

_{Released
on}
2022/04/12

Description
[CVE-2022-27670] Denial of service (DOS) in SQL Anywhere

Security Advisory

_{Related note}
3150845

_CVSS
4.3

_{Affected system
type}
BI/BO platform

_Patchday
2022-04

_{Released
on}
2022/04/12

Description
[CVE-2022-28216] Cross-Site Scripting (XSS) vulnerability in SAP BusinessObjects Business Intelligence Platform (BI Workspace)

Security Advisory

_{Related note}
3138299

_CVSS
4.1

_{Affected system
type}
Adobe LiveCycle Designer

_Patchday
2022-04

_{Released
on}
2022/04/12

Description
[CVE-2021-44832] Remote Code Execution vulnerability associated with Apache Log4j 2 component used in SAP NetWeaver ABAP Server and ABAP Platform (Adobe LiveCycle Designer 11.0)

Security Advisory

_{Related note}
3145769

_CVSS
5.3

_{Affected system
type}
BI/BO platform

_Patchday
2022-04

_{Released
on}
2022/04/12

Description
[CVE-2022-27667] Information Disclosure vulnerability in SAP BusinessObjects Business Intelligence Platform (CMC)

Security Advisory

_{Related note}
3132633

_CVSS
5.4

_{Affected system
type}
SAP GUI / Frontend

_Patchday
2022-04

_{Released
on}
2022/04/12

Description
Information Disclosure vulnerability in SAP GUI for Windows

Security Advisory

_{Related note}
3163703

_CVSS
6.1

_{Affected system
type}
ABAP

_Patchday
2022-04

_{Released
on}
2022/04/12

Description
Multiple Vulnerabilities in URI.js bundled with SAPUI5

Security Advisory

_{Related note}
3101986

_CVSS
4.1

_{Affected system
type}
ABAP

_Patchday
2022-04

_{Released
on}
2022/04/12

Description
Enable CSP support for OP1909 in SAP CRM WebClient UI

Security Advisory

_{Related note}
3126557

_CVSS
6.1

_{Affected system
type}
ABAP

_Patchday
2022-04

_{Released
on}
2022/04/12

Description
[CVE-2022-28770] Cross-Site Scripting (XSS) vulnerability in SAPUI5 (vbm library)

Security Advisory

_{Related note}
3143437

_CVSS
6.5

_{Affected system
type}
SAP 3D Visual Enterprise

_Patchday
2022-04

_{Released
on}
2022/04/12

Description
[Multiple CVEs] Improper Input Validation in SAP 3D Visual Enterprise Viewer

Security Advisory

_{Related note}
3165856

_CVSS
4.3

_{Affected system
type}
SAP Innovation Management

_Patchday
2022-04

_{Released
on}
2022/03/28

Description
[CVE-2022-27658] Missing authorization check in SAP Innovation Management

Security Advisory

_{Related note}
3152442

_CVSS
5.3

_{Affected system
type}
Java

_Patchday
2022-04

_{Released
on}
2022/04/12

Description
[CVE-2022-27669] Missing Authentication check in XML Data Archiving Service

Security Advisory

_{Related note}
3165333

_CVSS
4.7

_{Affected system
type}
ABAP

_Patchday
2022-04

_{Released
on}
2022/04/12

Description
[CVE-2022-28215] URL Redirection vulnerability in SAP NetWeaver ABAP Server and ABAP Platform

Security Advisory

_{Related note}
3111293

_CVSS
4.9

_{Affected system
type}
Kernel

_Patchday
2022-04

_{Released
on}
2022/04/12

Description
[CVE-2022-28773] Denial of service (DOS) in SAP Web Dispatcher and SAP Netweaver (Internet Communication Manager)

Security Advisory

Notifications

Security Advisories

Severity

SAP© Security advisories 17

System Types

Affected SAP© system types

Related note 3148377

CVSS 6.5

Affected system type Java

Patchday2022-04

Released on2022/04/12

Related note 3055044

CVSS 5.4

Affected system type BI/BO platform

Patchday2022-04

Released on2022/04/12

Related note 3137191

CVSS 6.8

Affected system type BI/BO platform

Patchday2022-04

Released on2022/04/12

Related note 3163583

CVSS 6.1

Affected system type Java

Patchday2022-04

Released on2022/04/12

Related note 3148094

CVSS 6.5

Affected system type Sybase

Patchday2022-04

Released on2022/04/12

Related note 3150845

CVSS 4.3

Affected system type BI/BO platform

Patchday2022-04

Released on2022/04/12

Related note 3138299

CVSS 4.1

Affected system type Adobe LiveCycle Designer

Patchday2022-04

Released on2022/04/12

Related note 3145769

CVSS 5.3

Affected system type BI/BO platform

Patchday2022-04

Released on2022/04/12

Related note 3132633

CVSS 5.4

Affected system type SAP GUI / Frontend

Patchday2022-04

Released on2022/04/12

Related note 3163703

CVSS 6.1

Affected system type ABAP

Patchday2022-04

Released on2022/04/12

Related note 3101986

CVSS 4.1

Affected system type ABAP

Patchday2022-04

Released on2022/04/12

Related note 3126557

CVSS 6.1

Affected system type ABAP

Patchday2022-04

Released on2022/04/12

Related note 3143437

CVSS 6.5

Affected system type SAP 3D Visual Enterprise

Patchday2022-04

Released on2022/04/12

Related note 3165856

CVSS 4.3

Affected system type SAP Innovation Management

Patchday2022-04

Released on2022/03/28

Related note 3152442

CVSS 5.3

Affected system type Java

Patchday2022-04

_{Related note}
3148377

_CVSS
6.5

_{Affected system
type}
Java

_Patchday
2022-04

_{Released
on}
2022/04/12

_{Related note}
3055044

_CVSS
5.4

_{Affected system
type}
BI/BO platform

_Patchday
2022-04

_{Released
on}
2022/04/12

_{Related note}
3137191

_CVSS
6.8

_{Affected system
type}
BI/BO platform

_Patchday
2022-04

_{Released
on}
2022/04/12

_{Related note}
3163583

_CVSS
6.1

_{Affected system
type}
Java

_Patchday
2022-04

_{Released
on}
2022/04/12

_{Related note}
3148094

_CVSS
6.5

_{Affected system
type}
Sybase

_Patchday
2022-04

_{Released
on}
2022/04/12

_{Related note}
3150845

_CVSS
4.3

_{Affected system
type}
BI/BO platform

_Patchday
2022-04

_{Released
on}
2022/04/12

_{Related note}
3138299

_CVSS
4.1

_{Affected system
type}
Adobe LiveCycle Designer

_Patchday
2022-04

_{Released
on}
2022/04/12

_{Related note}
3145769

_CVSS
5.3

_{Affected system
type}
BI/BO platform

_Patchday
2022-04

_{Released
on}
2022/04/12

_{Related note}
3132633

_CVSS
5.4

_{Affected system
type}
SAP GUI / Frontend

_Patchday
2022-04

_{Released
on}
2022/04/12

_{Related note}
3163703

_CVSS
6.1

_{Affected system
type}
ABAP

_Patchday
2022-04

_{Released
on}
2022/04/12

_{Related note}
3101986

_CVSS
4.1

_{Affected system
type}
ABAP

_Patchday
2022-04

_{Released
on}
2022/04/12

_{Related note}
3126557

_CVSS
6.1

_{Affected system
type}
ABAP

_Patchday
2022-04

_{Released
on}
2022/04/12

_{Related note}
3143437

_CVSS
6.5

_{Affected system
type}
SAP 3D Visual Enterprise

_Patchday
2022-04

_{Released
on}
2022/04/12

_{Related note}
3165856

_CVSS
4.3

_{Affected system
type}
SAP Innovation Management

_Patchday
2022-04

_{Released
on}
2022/03/28

_{Related note}
3152442

_CVSS
5.3

_{Affected system
type}
Java

_Patchday
2022-04

_{Released
on}
2022/04/12

_{Related note}
3165333

_CVSS
4.7

_{Affected system
type}
ABAP

_Patchday
2022-04

_{Released
on}
2022/04/12