We've created the first of its kind, SecurityBridge Cloud Platform, designed to prioritize SAP patches, updates, and remediation strategies that help prevent disruptions to critical business systems. Our security advisories provide SAP users with valuable insights into the security and business implications of operating SAP.
The user interface is designed to be as intuitive as possible, but we’d love to hear your feedback and
suggestions.
×
Yikes, there is work to do!
This time we found critical correction advisiories. We count 16 and the highest
CVSS
score is 9.1.
Severity
SAP© Security advisories 16
System Types
Affected SAP© system types
3627373
CVSS
9.1
Affected system type
Kernel
Patchday
2025-09
Released on
2025/09/09
Description
[CVE-2025-42958] Missing Authentication check in SAP NetWeaver
3642961
CVSS
8.8
Affected system type
SAP Business One
Patchday
2025-09
Released on
2025/09/09
Description
[CVE-2025-42933] Insecure Storage of Sensitive Information in SAP Business One (SLD)
3635475
CVSS
8.1
Affected system type
ABAP
Patchday
2025-09
Released on
2025/09/09
Description
[CVE-2025-42916] Missing input validation vulnerability in SAP S/4HANA (Private Cloud or On-Premise)
3633002
CVSS
8.1
Affected system type
ABAP
Patchday
2025-09
Released on
2025/09/09
Description
[CVE-2025-42929] Missing input validation vulnerability in SAP Landscape Transformation Replication Server
3581811
CVSS
7.7
Affected system type
ABAP
Patchday
2025-09
Released on
2025/04/08
Description
[CVE-2025-27428] Directory Traversal vulnerability in SAP NetWeaver and ABAP Platform (Service Data Collection)
3620264
CVSS
6.6
Affected system type
SAP Commerce Cloud SAP DataHub
Patchday
2025-09
Released on
2025/09/09
Description
[CVE-2025-22228] Security Misconfiguration vulnerability in Spring security within SAP Commerce Cloud and SAP Datahub
3614067
CVSS
6.5
Affected system type
ABAP
Patchday
2025-09
Released on
2025/09/09
Description
[CVE-2025-42930] Denial of Service (DoS) vulnerability in SAP Business Planning and Consolidation
3611420
CVSS
6.5
Affected system type
BI/BO platform
Patchday
2025-09
Released on
2025/09/09
Description
[CVE-2023-5072] Denial of Service (DoS) vulnerability due to outdated JSON library used in SAP BusinessObjects Business Intelligence Platform
3647098
CVSS
6.1
Affected system type
ABAP
Patchday
2025-09
Released on
2025/09/09
Description
[CVE-2025-42920] Cross-Site Scripting (XSS) vulnerability in SAP Supplier Relationship Management
3629325
CVSS
6.1
Affected system type
ABAP
Patchday
2025-09
Released on
2025/09/09
Description
[CVE-2025-42938] Cross-Site Scripting (XSS) vulnerability in SAP NetWeaver ABAP Platform
3619465
CVSS
5.3
Affected system type
Java
Patchday
2025-09
Released on
2025/09/09
Description
[CVE-2025-42926] Missing Authentication check in SAP NetWeaver Application Server Java
3640477
CVSS
4.3
Affected system type
Java
Patchday
2025-09
Released on
2025/09/09
Description
[CVE-2025-42925] Predictable Object Identifier vulnerability in SAP NetWeaver AS Java (IIOP Service)
3450692
CVSS
4.3
Affected system type
SAP Fiori
Patchday
2025-09
Released on
2025/09/09
Description
[CVE-2025-42923] Cross-Site Request Forgery (CSRF) vulnerability in SAP Fiori App (F4044 Manage Work Center Groups)
3624943
CVSS
3.5
Affected system type
SAP UI5
Patchday
2025-09
Released on
2025/08/12
Description
[CVE-2025-42941] Reverse Tabnabbing vulnerability in SAP Fiori (Launchpad)
3525295
CVSS
3.4
Affected system type
Java
Patchday
2025-09
Released on
2025/09/09
Description
[CVE-2025-42927] Information Disclosure due to Outdated OpenSSL Version in SAP NetWeaver AS Java (Adobe Document Service)
3632154
CVSS
3.1
Affected system type
SAP Commerce Cloud
Patchday
2025-09
Released on
2025/09/09
Description
[CVE-2024-13009] Potential Improper Resource Release vulnerability in SAP Commerce Cloud