Security Advisories
We've created the first of its kind, SecurityBridge Cloud Platform to prioritize SAP patches, updates and the remediation strategies essential for preventing the disruption of vital business systems. Our security advisories enable SAP users to understand the security and business implications of running SAP.
We hope you like it!
This time we found critical correction advisiories. We count 10 and the highest CVSS score is 9.9.
Severity
SAP© Security advisories 10
System Types
Affected SAP© system types
Affected system
type
ABAP
Patchday
2022-11
Released
on
2022/11/08
Description
[CVE-2022-41215] URL Redirection vulnerability in SAP NetWeaver ABAP Server and ABAP Platform
Affected system
type
Sybase platform
Patchday
2022-11
Released
on
2022/11/08
Description
[CVE-2022-41259] Denial of service (DOS) in SAP SQL Anywhere
Affected system
type
Java
Patchday
2022-11
Released
on
2022/11/08
Description
[CVE-2022-41207] URL Redirection vulnerability in SAP Biller Direct
Affected system
type
SAP UI5 SAP Fiori
Patchday
2022-11
Released
on
2022/11/08
Description
Insufficient Session Expiration in Central Fiori Launchpad
Affected system
type
SAP GUI / Frontend
Patchday
2022-11
Released
on
2022/11/08
Description
[CVE-2022-41205] Code injection vulnerability in SAP GUI for Windows
Affected system
type
SAP Financial Consolidation
Patchday
2022-11
Released
on
2022/11/08
Description
[CVE-2022-41258] Multiple Cross-Site Scripting (XSS) vulnerabilities in SAP Financial Consolidation
Affected system
type
ABAP, Java
Patchday
2022-11
Released
on
2022/11/08
Description
[CVE-2021-20223] Multiple Vulnerabilities in SQlite bundled with SAPUI5
Affected system
type
ABAP
Patchday
2022-11
Released
on
2022/11/08
Description
[CVE-2022-41214] Multiple vulnerabilities in SAP NetWeaver Application Server ABAP and ABAP Platform
Affected system
type
SAP 3D Visual Enterprise
Patchday
2022-11
Released
on
2022/11/08
Description
[CVE-2022-41211] Arbitrary Code Execution vulnerability in SAP 3D Visual Enterprise Author and SAP 3D Visual Enterprise Viewer
Affected system
type
BI/BO platform
Exploit available
Patchday
2022-11
Released
on
2022/11/08
Description
[CVE-2022-41203] Insecure Deserialization of Untrusted Data in SAP BusinessObjects Business Intelligence Platform (Central Management Console and BI Launchpad)