Security Advisory for March 2022
Advisory
Taking control of the SAP patch management process for the vast product portfolio offered by SAP SE is essential to maintain a steady security posture. We have reviewed the security patches released (and updated) in March 2022 and found corrections that eliminate the following attack vectors:
- "Code injection"
- "Cross-Site Scripting (XSS)"
- "Denial of service (DoS)"
- "Directory traversal (read)"
- "Information disclosure"
- "Missing authentication check Information disclosure"
- "Missing authorization check"
Patches released by the manufacturer contain solutions for the components
- "BC-ABA-SC"
- "BC-INS-TLS"
- "BC-JAS-WEB"
- "BI-BIP-SL-ENG-OLA"
- "CA-FLP-FE-COR"
- "EP-PIN-NAV"
- "EP-PIN-RTM"
- "EPM-BFC-PSI-INS"
- "MOB-SYC-SAP-WM"
- "SV-FRN-APP-RUM"
- "SV-FRN-INF-SDA"
View all SAP security advisories of March 2022.
- Share with: