We've created the first of its kind, SecurityBridge Cloud Platform, designed to prioritize SAP patches, updates, and remediation strategies that help prevent disruptions to critical business systems. Our security advisories provide SAP users with valuable insights into the security and business implications of operating SAP.
The user interface is designed to be as intuitive as possible, but we’d love to hear your feedback and
suggestions.
×
Yikes, there is work to do!
This time we found critical correction advisiories. We count 16 and the highest
CVSS
score is 10.0.
Severity
SAP© Security advisories 16
System Types
Affected SAP© system types
2934135
CVSS
10.0
Affected system type
Java
Exploit available
Patchday
2020-07
Released on
2020/07/14
Description
[CVE-2020-6287] Multiple Vulnerabilities in SAP NetWeaver AS JAVA (LM Configuration Wizard)
2932473
CVSS
7.7
Affected system type
Java
Patchday
2020-07
Released on
2020/07/14
Description
[CVE-2020-6285] Information Disclosure in SAP NetWeaver (XMLToolkit for Java)
2758000
CVSS
6.3
Affected system type
SAP Disclosure Management
Patchday
2020-07
Released on
2020/07/14
Description
[CVE-2020-6267] Multiple vulnerabilities in SAP Disclosure Management
2541823
CVSS
6.3
Affected system type
ABAP
Patchday
2020-07
Released on
2020/06/09
Description
Switchable authorization checks for RFC in SAP CRM (external billing)
2091403
CVSS
6.3
Affected system type
ABAP
Patchday
2020-07
Released on
2015/08/11
Description
Directory traversal in BC-MID-ICF
2603398
CVSS
6.3
Affected system type
ABAP
Patchday
2020-07
Released on
2020/07/14
Description
Missing authorization check in Allocation Management
2537961
CVSS
6.3
Affected system type
ABAP
Patchday
2020-07
Released on
2020/07/14
Description
Switchable Authorization checks for RFC in MM-PUR-GF
2486446
CVSS
6.3
Affected system type
ABAP
Patchday
2020-07
Released on
2020/07/14
Description
Missing Authorization check in Pricat Inbound and Pricat Outbound
2917743
CVSS
6.1
Affected system type
BI/BO platform
Patchday
2020-07
Released on
2020/07/14
Description
[CVE-2020-6281] Cross-Site Scripting (XSS) vulnerability in SAP Business Objects Business Intelligence Platform(BI Launch pad)
2849967
CVSS
6.1
Affected system type
BI/BO platform
Patchday
2020-07
Released on
2020/07/14
Description
[CVE-2020-6276] Cross-Site Scripting (XSS) vulnerability in SAP Business Objects Business Intelligence Platform(Bipodata)
2938831
CVSS
6.0
Affected system type
ABAP
Patchday
2020-07
Released on
2020/06/23
Description
SESS: Duplicate AU3 entries in the Security Audit Log
2896025
CVSS
5.8
Affected system type
Java
Patchday
2020-07
Released on
2020/07/14
Description
[CVE-2020-6282] Server-Side Request Forgery in SAP NetWeaver AS JAVA (IIOP service)
2912708
CVSS
5.4
Affected system type
BI/BO platform
Patchday
2020-07
Released on
2020/07/14
Description
[CVE-2020-6278] Cross-Site Scripting (XSS) vulnerability in SAP Business Objects Business Intelligence Platform (BI Launchpad and CMC)
2847817
CVSS
4.3
Affected system type
ABAP
Patchday
2020-07
Released on
2020/07/14
Description
Missing Authorization check in Travel Management
2874738
CVSS
3.8
Affected system type
ABAP
Patchday
2020-07
Released on
2020/07/14
Description
Missing Authorization Check in S4 ACR Brazil Option
2927373
CVSS
2.7
Affected system type
ABAP
Patchday
2020-07
Released on
2020/07/14
Description
[CVE-2020-6280] Information Disclosure in SAP NetWeaver (ABAP Server) and ABAP Platform