We've created the first of its kind, SecurityBridge Cloud Platform, designed to prioritize SAP patches, updates, and remediation strategies that help prevent disruptions to critical business systems. Our security advisories provide SAP users with valuable insights into the security and business implications of operating SAP.

The user interface is designed to be as intuitive as possible, but we’d love to hear your feedback and suggestions.

× Hey there! Glad you made it.
We have found 18 security advices for you to review.

 

Severity
SAP© Security advisories 18
 System Types
Affected SAP© system types

 

Related note
3417627
CVSS
8.8

Affected system type Java
Patchday 2025-02
Released on 2024/02/13
Description [CVE-2024-22126] Cross Site Scripting vulnerability in NetWeaver AS Java (User Admin Application)
Security Advisory
Related note
3567551
CVSS
8.6

Affected system type Java
Patchday 2025-02
Released on 2025/02/11
Description [CVE-2025-25243] Path traversal vulnerability in SAP Supplier Relationship Management (Master Data Management Catalog)
Security Advisory
Related note
3567172
CVSS
7.5

Affected system type SAP Enterprise...
Patchday 2025-02
Released on 2025/02/11
Description [CVE-2024-38819] Multiple vulnerabilities in SAP Enterprise Project Connection
Security Advisory
Related note
3563929
CVSS
7.1

Affected system type SAP HANA Platform
Patchday 2025-02
Released on 2025/02/11
Description [CVE-2025-24868] Open Redirect Vulnerability in SAP HANA extended application services, advanced model (User Account and Authentication Services)
Security Advisory
Related note
3555364
CVSS
6.8

Affected system type SAP Commerce Cloud
Patchday 2025-02
Released on 2025/02/11
Description [CVE-2025-24875] SameSite Defense in Depth not applied for some cookies in SAP Commerce
Security Advisory
Related note
3559510
CVSS
6.8

Affected system type SAP Commerce Cloud
Patchday 2025-02
Released on 2025/02/11
Description [CVE-2025-24874] Missing Defense in Depth Against Clickjacking in SAP Commerce (Backoffice)
Security Advisory
Related note
3445708
CVSS
6.1

Affected system type BI/BO platform
Patchday 2025-02
Released on 2025/02/11
Description [CVE-2025-24867] Cross-Site Scripting (XSS) vulnerability in SAP BusinessObjects Business Intelligence platform (BI Launchpad)
Security Advisory
Related note
3557138
CVSS
6.1

Affected system type Java
Patchday 2025-02
Released on 2025/02/11
Description Update 1 to Security Note 3417627 - [CVE-2024-22126] Cross Site Scripting vulnerability in NetWeaver AS Java (User Admin Application)
Security Advisory
Related note
3562336
CVSS
6.0

Affected system type SAP GUI / Frontend
Patchday 2025-02
Released on 2025/02/11
Description [CVE-2025-24870] Insecure Key & Secret Management vulnerability in SAP GUI for Windows
Security Advisory
Related note
3540273
CVSS
5.5

Affected system type SAP Commerce Cloud
Patchday 2025-02
Released on 2025/02/11
Description [CVE-2024-45216] Multiple vulnerabilities in Apache Solr within SAP Commerce Cloud
Security Advisory
Related note
3526203
CVSS
5.4

Affected system type Java
Patchday 2025-02
Released on 2025/02/11
Description [CVE-2025-0054] Cross-Site Scripting (XSS) vulnerability in SAP NetWeaver Application Server Java
Security Advisory
Related note
3532025
CVSS
5.4

Affected system type ABAP
Patchday 2025-02
Released on 2025/02/11
Description [CVE-2025-25241] Missing Authorization check in SAP Fiori Apps Reference Library (My Overtime Requests)
Security Advisory
Related note
3287784
CVSS
5.3

Affected system type Java
Patchday 2025-02
Released on 2023/04/11
Description [CVE-2023-24527] Improper Access Control in SAP NetWeaver AS Java for Deploy Service
Security Advisory
Related note
3561264
CVSS
5.3

Affected system type ABAP
Patchday 2025-02
Released on 2025/02/11
Description [CVE-2025-23193] Information Disclosure vulnerability in SAP NetWeaver Application Server ABAP
Security Advisory
Related note
3546470
CVSS
5.3

Affected system type ABAP
Patchday 2025-02
Released on 2025/02/11
Description [CVE-2025-23187] Missing Authorization Check in SAP NetWeaver and ABAP Platform (SDCCN)
Security Advisory
Related note
3553753
CVSS
4.3

Affected system type ABAP
Patchday 2025-02
Released on 2025/02/11
Description [CVE-2025-24872] Missing Authorization check in SAP ABAP Platform (ABAP Build Framework)
Security Advisory
Related note
3547581
CVSS
4.3

Affected system type ABAP
Patchday 2025-02
Released on 2025/02/11
Description [CVE-2025-23190] Missing Authorization check in SAP NetWeaver and ABAP platform (ST-PI)
Security Advisory
Related note
3550027
CVSS
4.3

Affected system type Java
Patchday 2025-02
Released on 2025/02/11
Description [CVE-2025-24869] Information Disclosure vulnerability in SAP NetWeaver Application Server Java
Security Advisory