We've created the first of its kind, SecurityBridge Cloud Platform, designed to prioritize SAP patches, updates, and remediation strategies that help prevent disruptions to critical business systems. Our security advisories provide SAP users with valuable insights into the security and business implications of operating SAP.
We hope you enjoy using it!
Relax, this release only contains severity low advisories. None of the 3 corrections ranges higher than CVSS score higher than 3.5.
Affected system
type
SAP UI5
Patchday
2025-09
Released
on
2025/08/12
Description
[CVE-2025-42941] Reverse Tabnabbing vulnerability in SAP Fiori (Launchpad)
Affected system
type
Java
Patchday
2025-09
Released
on
2025/09/09
Description
[CVE-2025-42927] Information Disclosure due to Outdated OpenSSL Version in SAP NetWeaver AS Java (Adobe Document Service)
Affected system
type
SAP Commerce Cloud
Patchday
2025-09
Released
on
2025/09/09
Description
[CVE-2024-13009] Potential Improper Resource Release vulnerability in SAP Commerce Cloud