Security Advisories  

We've created the first of its kind, SecurityBridge Cloud Platform to prioritize SAP patches, updates and the remediation strategies essential for preventing the disruption of vital business systems. Our security advisories enable SAP users to understand the security and business implications of running SAP.

The user interface, is designed to be as intuitive as possible but we'd love to hear your feedback and opinions.
We hope you like it!
× Hey there! Glad you made it.
We have found 17 security advices for you to review.

 

 Severity
SAP© Security advisories 17
 System Types
Affected SAP© system types

 

Related note
3137191
CVSS
6.8

Affected system type
BI/BO platform
Patchday
2022-04
Released on
2022/04/12

Description
[CVE-2022-22541] Information Disclosure vulnerability in SAP BusinessObjects Platform

 

Related note
3148377
CVSS
6.5

Affected system type
Java
Patchday
2022-04
Released on
2022/04/12

Description
[CVE-2022-28217] Missing XML Validation vulnerability in SAP NW EP WPC

 

Related note
3148094
CVSS
6.5

Affected system type
Sybase
Patchday
2022-04
Released on
2022/04/12

Description
[CVE-2022-27670] Denial of service (DOS) in SQL Anywhere

 

Related note
3143437
CVSS
6.5

Affected system type
SAP 3D Visual Enterprise
Patchday
2022-04
Released on
2022/04/12

Description
[Multiple CVEs] Improper Input Validation in SAP 3D Visual Enterprise Viewer

 

Related note
3163583
CVSS
6.1

Affected system type
Java
Patchday
2022-04
Released on
2022/04/12

Description
[CVE-2022-26105] Cross-Site Scripting (XSS) vulnerability in SAP NetWeaver Enterprise Portal

 

Related note
3163703
CVSS
6.1

Affected system type
ABAP
Patchday
2022-04
Released on
2022/04/12

Description
Multiple Vulnerabilities in URI.js bundled with SAPUI5

 

Related note
3126557
CVSS
6.1

Affected system type
ABAP
Patchday
2022-04
Released on
2022/04/12

Description
[CVE-2022-28770] Cross-Site Scripting (XSS) vulnerability in SAPUI5 (vbm library)

 

Related note
3055044
CVSS
5.4

Affected system type
BI/BO platform
Patchday
2022-04
Released on
2022/04/12

Description
[CVE-2022-28213] Missing XML Validation vulnerability in SAP BusinessObjects Business Intelligence Platform (dswsbobje - SOAP Web services)

 

Related note
3132633
CVSS
5.4

Affected system type
SAP GUI / Frontend
Patchday
2022-04
Released on
2022/04/12

Description
Information Disclosure vulnerability in SAP GUI for Windows

 

Related note
3145769
CVSS
5.3

Affected system type
BI/BO platform
Patchday
2022-04
Released on
2022/04/12

Description
[CVE-2022-27667] Information Disclosure vulnerability in CMC

 

Related note
3152442
CVSS
5.3

Affected system type
Java
Patchday
2022-04
Released on
2022/04/12

Description
[CVE-2022-27669] Missing Authentication check in XML Data Archiving Service

 

Related note
3111293
CVSS
4.9

Affected system type
Kernel
Patchday
2022-04
Released on
2022/04/12

Description
[CVE-2022-28773] Denial of service (DOS) in SAP Web Dispatcher and SAP Netweaver (Internet Communication Manager)

 

Related note
3165333
CVSS
4.7

Affected system type
ABAP
Patchday
2022-04
Released on
2022/04/12

Description
[CVE-2022-28215] URL Redirection vulnerability in SAP NetWeaver ABAP Server and ABAP Platform

 

Related note
3150845
CVSS
4.3

Affected system type
BI/BO platform
Patchday
2022-04
Released on
2022/04/12

Description
[CVE-2022-28216] Cross-Site Scripting (XSS) vulnerability in SAP BusinessObjects Business Intelligence Platform (BI Workspace)

 

Related note
3165856
CVSS
4.3

Affected system type
SAP Innovation Management
Patchday
2022-04
Released on
2022/03/28

Description
[CVE-2022-27658] Missing authorization check in SAP Innovation Management

 

Related note
3138299
CVSS
4.1

Affected system type
Adobe LiveCycle Designer
Patchday
2022-04
Released on
2022/04/12

Description
[CVE-2021-44832] Remote Code Execution vulnerability associated with Apache Log4j 2 component used in SAP NetWeaver ABAP Server and ABAP Platform (Adobe LiveCycle Designer 11.0)

 

Related note
3101986
CVSS
4.1

Affected system type
ABAP
Patchday
2022-04
Released on
2022/04/12

Description
Enable CSP support for OP1909 in SAP CRM WebClient UI

 

 
ABEX logo

SecurityBridge helps in prioritizing SAP patches, updates and the remediation strategies essential for preventing the disruption of vital business systems. We help businesses in making their SAP systems more secure.

SecurityBridge

© Copyright 2022 by SecurityBridge // NCMI GmbH