We've created the first of its kind, SecurityBridge Cloud Platform, designed to prioritize SAP patches, updates, and remediation strategies that help prevent disruptions to critical business systems. Our security advisories provide SAP users with valuable insights into the security and business implications of operating SAP.

The user interface is designed to be as intuitive as possible, but we’d love to hear your feedback and suggestions.

×

Yikes, there is work to do!
This time we found critical correction advisiories. We count 12 and the highest CVSS score is 9.9.

 

Severity
SAP© Security advisories 12
 System Types
Affected SAP© system types

 

Related note
3550708
CVSS
9.9

Affected system type ABAP
Patchday 2025-01
Released on 2025/01/14
Description [CVE-2025-0066] Information Disclosure vulnerability in SAP NetWeaver AS for ABAP and ABAP Platform(Internet Communication Framework)
Security Advisory
Related note
3537476
CVSS
9.9

Affected system type Kernel
Patchday 2025-01
Released on 2025/01/14
Description [CVE-2025-0070] Improper Authentication in SAP NetWeaver ABAP Server and ABAP Platform
Security Advisory
Related note
3550816
CVSS
8.8

Affected system type ABAP
Patchday 2025-01
Released on 2025/01/14
Description [CVE-2025-0063] SQL Injection vulnerability in SAP NetWeaver AS for ABAP and ABAP Platform
Security Advisory
Related note
3542533
CVSS
7.8

Affected system type SAPSetup
Patchday 2025-01
Released on 2025/01/14
Description [CVE-2025-0069] DLL Hijacking vulnerability in SAPSetup
Security Advisory
Related note
3542698
CVSS
6.5

Affected system type ABAP
Patchday 2025-01
Released on 2025/01/14
Description [CVE-2025-0058] Information Disclosure vulnerability in SAP Business Workflow and SAP Flexible Workflow
Security Advisory
Related note
3540108
CVSS
6.3

Affected system type Java
Patchday 2025-01
Released on 2025/01/14
Description [CVE-2025-0067] Missing Authorization check in SAP NetWeaver Application Server Java
Security Advisory
Related note
3502459
CVSS
6.0

Affected system type SAP GUI / Frontend
Patchday 2025-01
Released on 2025/01/14
Description [CVE-2025-0056] Information Disclosure vulnerability in SAP GUI for Java
Security Advisory
Related note
3472837
CVSS
6.0

Affected system type SAP GUI / Frontend
Patchday 2025-01
Released on 2025/01/14
Description [CVE-2025-0055] Information Disclosure vulnerability in SAP GUI for Windows
Security Advisory
Related note
3536461
CVSS
5.3

Affected system type ABAP
Patchday 2025-01
Released on 2025/01/14
Description [CVE-2025-0053] Information Disclosure Vulnerability in SAP NetWeaver Application Server for ABAP and ABAP Platform
Security Advisory
Related note
3514421
CVSS
4.8

Affected system type Java
Patchday 2025-01
Released on 2025/01/14
Description [CVE-2025-0057] Cross-Site Scripting vulnerability in SAP NetWeaver AS JAVA (User Admin Application)
Security Advisory
Related note
3550674
CVSS
4.3

Affected system type ABAP
Patchday 2025-01
Released on 2025/01/14
Description [CVE-2025-0068] Missing Authorization check in Remote Function Call (RFC) in SAP NetWeaver Application Server ABAP
Security Advisory
Related note
3492169
CVSS
2.2

Affected system type BI/BO platform
Patchday 2025-01
Released on 2025/01/14
Description Multiple Buffer overflow vulnerabilities in SAP BusinessObjects Business Intelligence Platform (Crystal Reports for Enterprise)
Security Advisory