We've created the first of its kind, SecurityBridge Cloud Platform, designed to prioritize SAP patches, updates, and remediation strategies that help prevent disruptions to critical business systems. Our security advisories provide SAP users with valuable insights into the security and business implications of operating SAP.

The user interface is designed to be as intuitive as possible, but we’d love to hear your feedback and suggestions.

× Hey there! Glad you made it.
We have found 5 security advices for you to review.

 

Severity
SAP© Security advisories 5
 System Types
Affected SAP© system types

 

Related note
3684682
CVSS
8.2

Affected system type Kernel / Web Dispatcher
Patchday 2025-12
Released on 2025/12/09
Description [CVE-2025-42878] Sensitive Data Exposure in SAP Web Dispatcher and Internet Communication Manager (ICM)
Security Advisory
Related note
3640185
CVSS
7.9

Affected system type Java
Patchday 2025-12
Released on 2025/12/09
Description [CVE-2025-42874] Denial of service (DOS) in SAP NetWeaver (remote service for Xcelsius)
Security Advisory
Related note
3650226
CVSS
7.5

Affected system type BI/BO platform
Patchday 2025-12
Released on 2025/12/09
Description [CVE-2025-48976] Denial of service (DOS) in SAP Business Objects
Security Advisory
Related note
3677544
CVSS
7.5

Affected system type Kernel / Web Dispatcher
Patchday 2025-12
Released on 2025/12/09
Description [CVE-2025-42877] Memory Corruption vulnerability in SAP Web Dispatcher, Internet Communication Manager and SAP Content Server
Security Advisory
Related note
3672151
CVSS
7.1

Affected system type ABAP
Patchday 2025-12
Released on 2025/12/09
Description [CVE-2025-42876] Missing Authorization Check in SAP S/4 HANA Private Cloud (Financials General Ledger)
Security Advisory