We've created the first of its kind, SecurityBridge Cloud Platform, designed to prioritize SAP patches, updates, and remediation strategies that help prevent disruptions to critical business systems. Our security advisories provide SAP users with valuable insights into the security and business implications of operating SAP.
We hope you enjoy using it!
This time we found critical correction advisiories. We count 6 and the highest CVSS score is 10.0.
Affected system
type
Java
Patchday
2025-07
Released
on
2025/05/13
Description
[CVE-2025-30012] Multiple vulnerabilities in SAP Supplier Relationship Management (Live Auction Cockpit)
Affected system
type
ABAP
Patchday
2025-07
Released
on
2025/07/08
Description
[CVE-2025-42967] Code Injection vulnerability in SAP S/4HANA and SAP SCM (Characteristic Propagation)
Affected system
type
Java
Patchday
2025-07
Released
on
2025/07/08
Description
[CVE-2025-42963] Insecure Deserialization in SAP NetWeaver Application Server for Java (Log Viewer )
Affected system
type
Java
Patchday
2025-07
Released
on
2025/07/08
Description
[CVE-2025-42966] Insecure Deserialization vulnerability in SAP NetWeaver (XML Data Archiving Service)
Affected system
type
Java
Patchday
2025-07
Released
on
2025/07/08
Description
[CVE-2025-42964] Insecure Deserialization in SAP NetWeaver Enterprise Portal Administration
Affected system
type
Java
Patchday
2025-07
Released
on
2025/07/08
Description
[CVE-2025-42980] Insecure Deserialization in SAP NetWeaver Enterprise Portal Federated Portal Network