We've created the first of its kind, SecurityBridge Cloud Platform, designed to prioritize SAP patches, updates, and remediation strategies that help prevent disruptions to critical business systems. Our security advisories provide SAP users with valuable insights into the security and business implications of operating SAP.
We hope you enjoy using it!
We have found 5 security advices for you to review.
Affected system
type
ABAP
Patchday
2025-04
Released
on
2025/04/08
Description
[CVE-2025-30014] Directory Traversal vulnerability in SAP Capital Yield Tax Management
Affected system
type
ABAP
Patchday
2025-04
Released
on
2025/04/08
Description
[CVE-2025-27428] Directory Traversal vulnerability in SAP NetWeaver and ABAP Platform (Service Data Collection)
Affected system
type
SAP Commerce Cloud
Patchday
2025-04
Released
on
2025/04/08
Description
[CVE-2024-56337] Time-of-check Time-of-use (TOCTOU) Race Condition vulnerability in Apache Tomcat within SAP Commerce Cloud
Affected system
type
ABAP
Patchday
2025-04
Released
on
2025/04/08
Description
[CVE-2025-23186] Mixed Dynamic RFC Destination vulnerability through Remote Function Call (RFC) in SAP NetWeaver Application Server ABAP
Affected system
type
BI/BO platform
Patchday
2025-04
Released
on
2025/02/11
Description
[CVE-2025-0064] Improper Authorization in SAP BusinessObjects Business Intelligence platform (Central Management Console)