We've created the first of its kind, SecurityBridge Cloud Platform, designed to prioritize SAP patches, updates, and remediation strategies that help prevent disruptions to critical business systems. Our security advisories provide SAP users with valuable insights into the security and business implications of operating SAP.
We hope you enjoy using it!
Relax, this release only contains severity low advisories. None of the 5 corrections ranges higher than CVSS score higher than 3.7.
Affected system
type
ABAP
Patchday
2025-03
Released
on
2025/03/11
Description
[CVE-2025-27432] Missing Authorization check in SAP Electronic Invoicing for Brazil (eDocument Cockpit)
Affected system
type
ABAP
Patchday
2025-03
Released
on
2025/03/11
Description
[CVE-2025-27430] Server Side Request Forgery (SSRF) in SAP CRM and SAP S/4 HANA (Interaction Center)
Affected system
type
BTP
Patchday
2025-03
Released
on
2025/03/11
Description
Open Source Security Advisory: Best Practices for Securing Spring Boot Actuator Endpoints for applications running on BTP
Affected system
type
SAP Commerce Cloud SAP DataHub
Patchday
2025-03
Released
on
2025/03/11
Description
[CVE-2024-38819] Multiple vulnerabilities in Spring Framework within SAP Commerce Cloud and SAP Datahub
Affected system
type
ABAP
Patchday
2025-03
Released
on
2025/02/24
Description
[CVE-2025-26655] Missing Authorization check in SAP JIT(Outbound)