We've created the first of its kind, SecurityBridge Cloud Platform, designed to prioritize SAP patches, updates, and remediation strategies that help prevent disruptions to critical business systems. Our security advisories provide SAP users with valuable insights into the security and business implications of operating SAP.
The user interface is designed to be as intuitive as possible, but we’d love to hear your feedback and
suggestions.
×
Yikes, there is work to do!
This time we found critical correction advisiories. We count 16 and the highest
CVSS
score is 9.9.
Severity
SAP© Security advisories 16
System Types
Affected SAP© system types
3242933
CVSS
9.9
Affected system type
Java
Patchday
2022-10
Released on
2022/10/11
Description
[CVE-2022-39802] File path traversal vulnerability in SAP Manufacturing Execution
3229132
CVSS
8.2
Affected system type
BI/BO platform
Patchday
2022-10
Released on
2022/10/11
Description
[CVE-2022-39013] Information Disclosure vulnerability in SAP BusinessObjects Business Intelligence Platform (Program Objects)
3232021
CVSS
8.1
Affected system type
Sybase platform
Patchday
2022-10
Released on
2022/10/11
Description
[CVE-2022-35299] Buffer Overflow in SAP SQL Anywhere and SAP IQ
3239293
CVSS
7.7
Affected system type
BI/BO platform
Patchday
2022-10
Released on
2022/10/11
Description
[CVE-2022-39015] Information Disclosure vulnerability in SAP BusinessObjects Business Intelligence Platform(AdminTools/ Query Builder)
3245929
CVSS
7.0
Affected system type
SAP 3D Visual Enterprise
Patchday
2022-10
Released on
2022/10/11
Description
[Multiple CVEs] Multiple vulnerabilities in SAP 3D Visual Enterprise Author
3245928
CVSS
7.0
Affected system type
SAP 3D Visual Enterprise
Patchday
2022-10
Released on
2022/10/11
Description
[Multiple CVEs] Multiple vulnerabilities in SAP 3D Visual Enterprise Viewer
3233226
CVSS
6.8
Affected system type
BI/BO platform
Patchday
2022-10
Released on
2022/10/11
Description
[CVE-2022-35296] Information Disclosure vulnerability in SAP BusinessObjects Business Intelligence Platform (Version Management System)
3049899
CVSS
6.5
Affected system type
SAP Enable Now
Patchday
2022-10
Released on
2022/10/11
Description
[CVE-2022-35297] Stored Cross-Site Scripting (XSS) vulnerability in SAP Enable Now
2495712
CVSS
6.5
Affected system type
ABAP
Patchday
2022-10
Released on
2022/10/11
Description
Missing authorization check in SAP Automotive Solutions
3202523
CVSS
6.1
Affected system type
SAP Commerce
Patchday
2022-10
Released on
2022/10/11
Description
Cross-Site Scripting (XSS) vulnerability in SAP Commerce
3211161
CVSS
6.1
Affected system type
BI/BO platform
Patchday
2022-10
Released on
2022/10/11
Description
[CVE-2022-39800] Cross-Site Scripting (XSS) vulnerability in SAP BusinessObjects Business Intelligence Platform (BI LaunchPad)
3229425
CVSS
5.4
Affected system type
BI/BO platform
Patchday
2022-10
Released on
2022/10/11
Description
[CVE-2022-41206] Cross-Site Scripting (XSS) vulnerability in SAP BusinessObjects Business Intelligence platform / Analysis for OLAP
3248384
CVSS
4.9
Affected system type
SAP Customer Data Cloud
Patchday
2022-10
Released on
2022/10/11
Description
[CVE-2022-41210] Information Disclosure Vulnerability in SAP Customer Data Cloud (Gigya)
3248970
CVSS
4.9
Affected system type
SAP Customer Data Cloud
Patchday
2022-10
Released on
2022/10/11
Description
[CVE-2022-41209] Information Disclosure Vulnerability in SAP Customer Data Cloud (Gigya)
3167342
CVSS
4.8
Affected system type
BI/BO platform
Patchday
2022-10
Released on
2022/10/11
Description
[CVE-2022-35226] Cross-Site Scripting (XSS) vulnerability in Data Services Management Console
3234755
CVSS
4.3
Affected system type
ABAP
Patchday
2022-10
Released on
2022/10/11
Description
Information Disclosure vulnerability in Master Data Governance