We've created the first of its kind, SecurityBridge Cloud Platform, designed to prioritize SAP patches, updates, and remediation strategies that help prevent disruptions to critical business systems. Our security advisories provide SAP users with valuable insights into the security and business implications of operating SAP.
The user interface is designed to be as intuitive as possible, but we’d love to hear your feedback and
suggestions.
×
Hey there! Glad you made it.
We have found 14 security advices for you to review.
3798823
CVSS
6.5
Affected system type
Java
Patchday
2026-10
Released on
2026/10/13
Description
3798823 - [CVE-2026-76972] Cross-Site Scripting (XSS) vulnerability in SAP Manufacturing Integration and Intelligence
3756450
CVSS
6.5
Affected system type
ABAP
Patchday
2026-10
Released on
2026/09/08
Description
[CVE-2026-44766] - SQL Injection vulnerability in SAP S/4HANA (Intercompany Matching and Reconciliation)
3703856
CVSS
6.4
Affected system type
ABAP
Patchday
2026-10
Released on
2026/03/10
Description
3703856 - [CVE-2026-24309] Missing Authorization check in SAP NetWeaver Application Server for ABAP
3689080
CVSS
6.4
Affected system type
ABAP
Patchday
2026-10
Released on
2026/03/10
Description
3689080 - [CVE-2026-24316] Server-Side Request Forgery (SSRF) in SAP NetWeaver Application Server for ABAP
3794572
CVSS
6.1
Affected system type
SAP UI5
Patchday
2026-10
Released on
2026/10/13
Description
3794572 - [CVE-2026-76975] Cross-Site Scripting (XSS) vulnerability in SAPUI5 (Support Assistant Overlay)
3779985
CVSS
6.1
Affected system type
Java
Patchday
2026-10
Released on
2026/10/13
Description
3779985 - [CVE-2026-89117] Cross-Site Scripting (XSS) vulnerability in SAP NetWeaver Enterprise Portal
3629325
CVSS
6.1
Affected system type
ABAP
Patchday
2026-10
Released on
2025/09/09
Description
3629325 - [CVE-2025-42938] Cross-Site Scripting (XSS) vulnerability in SAP NetWeaver ABAP Platform
3678417
CVSS
6.1
Affected system type
ABAP
Patchday
2026-10
Released on
2026/02/10
Description
3678417 - [CVE-2026-0505] Multiple vulnerabilities in BSP Applications of SAP Document Management System
3790401
CVSS
6.1
Affected system type
Java
Patchday
2026-10
Released on
2026/10/13
Description
3790401 - [CVE-2026-89122] Open Redirect Vulnerability in SAP NetWeaver Enterprise Portal
3680888
CVSS
5.3
Affected system type
ABAP
Patchday
2026-10
Released on
2026/09/22
Description
3680888 - [CVE-2026-76974] Information Disclosure vulnerability in SAP Fiori Launchpad
3789825
CVSS
5.3
Affected system type
Java
Patchday
2026-10
Released on
2026/10/13
Description
3789825 - [CVE-2026-89118] Information Disclosure vulnerability in SAP NetWeaver Enterprise Portal
3799621
CVSS
4.7
Affected system type
ABAP
Patchday
2026-10
Released on
2026/10/13
Description
3799621 - [CVE-2026-89121] Missing Authorization Check in SAP S/4HANA (Linear Asset Management RAP Business Object)
3799054
CVSS
4.4
Affected system type
SAP UI5
Patchday
2026-10
Released on
2026/10/13
Description
3799054 - [CVE-2026-89106] Cross Site Scripting (XSS) vulnerability in SAPUI5
3810872
CVSS
4.3
Affected system type
ABAP
Patchday
2026-10
Released on
2026/10/13
Description
3810872 - [CVE-2026-89124] Missing Authorization Check in SAP Global Trade Services, edition for SAP HANA (Display Product Catalog Based on Customs Declaration)