We've created the first of its kind, SecurityBridge Cloud Platform, designed to prioritize SAP patches, updates, and remediation strategies that help prevent disruptions to critical business systems. Our security advisories provide SAP users with valuable insights into the security and business implications of operating SAP.
We hope you enjoy using it!
We have found 5 security advices for you to review.
Affected system
type
SAP Commerce
Patchday
2025-03
Released
on
2025/03/11
Description
[CVE-2025-27434] Cross-Site Scripting (XSS) vulnerability in SAP Commerce (Swagger UI)
Affected system
type
ABAP
Patchday
2025-03
Released
on
2025/03/11
Description
[CVE-2025-26661] Missing Authorization check in SAP NetWeaver (ABAP Class Builder)
Affected system
type
SAP Approuter
Patchday
2025-03
Released
on
2025/02/11
Description
[CVE-2025-24876] Authentication bypass via authorization code injection in SAP Approuter
Affected system
type
SAP Commerce Cloud
Patchday
2025-03
Released
on
2025/03/11
Description
[CVE-2024-38286] Multiple vulnerabilities in Apache Tomcat within SAP Commerce Cloud
Affected system
type
ABAP
Patchday
2025-03
Released
on
2024/07/09
Description
[CVE-2024-39592] Missing Authorization check in SAP PDCE