Skip to content
Layer Seven Security Logo
  • Cybersecurity Extension for SAP
    • Product Information
    • Features
      • SAP RISE Security
      • S/4HANA Migration Security
      • Code Vulnerability Analysis for SAP
      • Artificial Intelligence for SAP Security
      • SIEM Integration for SAP
      • Access Risk Analysis for SAP
      • NIS2 Compliance for SAP
      • Virtual Patching for SAP
    • Buyers Guide
  • Services
    • SAP RISE Security Compliance
    • SAP Cybersecurity Assessment
    • SAP Penetration Testing
    • SAP Code Vulnerability Assessment
  • Success Stories
  • Resources
    • Case Studies
    • Whitepapers
    • News
    • Threat Reports & Advisories
  • Contact Us
Book a Demo
Book a Demo
Layer Seven Security Logo
Menu Icon

Layer Seven Security Blog

Stay up to date on the latest trends in SAP security, new threats and information on protecting your critical systems against an attack

EXECUTIVE SUMMARY

Leading the Conversation in SAP Cybersecurity

Our blog is the premier resource for CISOs and SAP security and Basis specialists seeking deep technical insights into the SAP threat landscape. Our research team provides expert analysis on emerging attack vectors targeting S/4HANA, SAP RISE, and SAP BTP, as well as practical guidance on meeting global compliance standards such as NIS2 and SOX. By translating complex vulnerability disclosures into actionable defense strategies, we empower the global SAP community to harden their mission-critical environments and implement proactive monitoring frameworks that bridge the gap between SAP teams and security operations.

Recent Articles & Threat Intel

Search

SAP ASE Vulnerabilities: Critical Security Patches and Remediation

SAP released critical patches for Adaptive Server Enterprise (ASE) versions 15.7 and 16.0 to address vulnerabilities with CVSS scores between 7.2 and 9.1. Customers should immediately apply these patches via SAP Solution Manager to prevent risks like arbitrary command execution, privilege escalation, and unauthorized access to configuration files. SAP Adaptive Server Enterprise (ASE), formerly known

Read Article

SAP Security Notes: May 2020 Vulnerability Overview

The May 2020 SAP Security Notes address critical vulnerabilities, including code injection in Service Data Download, authentication bypass in SAP Business Intelligence Platform, and security flaws in SAP Adaptive Server Enterprise. These patches are essential for preventing server compromise and protecting sensitive system data across SAP environments. Executive Summary The May 2020 release from SAP

Read Article

Visualize Security Risks for SAP Systems with Threat Maps

environment, and customize views to focus on critical regions. Whether managing a local infrastructure or a complex, multi-national SAP environment, Threat Maps transform static database entries into actionable security intelligence. Key Takeaways How does the LMDB integrate with Threat Maps? System data is maintained in the Landscape Management Database (LMDB) of SAP Solution Manager, which

Read Article

SAP Discloses Security Gaps in Cloud Solutions (May 2020)

In May 2020, SAP disclosed security lapses across several of its cloud-based products, including SAP Cloud Platform, SAP Analytics Cloud, SuccessFactors, and Concur. The company identified these issues during an internal security review and initiated remediation efforts for approximately 9% of its 440,000 customers. Executive Summary The May 2020 announcement from SAP revealed that specific

Read Article

SAP Security Notes: April 2020 Vulnerability Summary

The April 2020 SAP security updates address several critical and high-risk vulnerabilities across the SAP ecosystem, including flaws in Business Objects, SAP Commerce, SAP Host Agent, and Knowledge Management. Administrators should prioritize applying these patches to prevent malicious code execution, unauthorized access, and potential privilege escalation. Executive Summary In April 2020, SAP released a series

Read Article

Layer Seven Security Recognized as a Top 25 Cyber Security Company for 2020

Layer Seven Security has been named one of the Top 25 Cyber Security Companies for 2020 by the editorial board of CIO Applications. This recognition highlights the firm’s innovative Cybersecurity Extension for SAP Solution Manager, a solution designed to provide automated vulnerability management, threat detection, and incident response for business-critical SAP systems. Why was Layer

Read Article

How to Secure the SAProuter from Remote Attacks

The SAProuter is a critical reverse proxy for remote SAP access, but its internet-facing position makes it a high-value target for remote exploits. Proper configuration—including restricted route permission tables, enforced SNC, and regular patching—is essential to prevent attackers from using the SAProuter to pivot into and compromise internal SAP servers. Executive Summary As remote work

Read Article

Dramatic Growth in Cyber Attacks and Enterprise Risk

Cyber attacks increased by six times their usual levels between February and March 2020, driven by the COVID-19 pandemic and a sudden shift to remote work. Hacking and phishing attempts rose by 37% in one month, while the exposure of Remote Desktop Protocol (RDP) and VPN services grew significantly, creating new vulnerabilities for enterprises. The

Read Article

SAP Security Notes: March 2020 Overview

This post summarizes the critical security vulnerabilities addressed in the March 2020 SAP Security Patch Day. It details three primary “Hot News” and critical notes affecting the SAP Diagnostics Agent, User-Experience Monitoring (UXMon), and the SAP NetWeaver UDDI Server, providing insights into their impacts and necessary remediation. Executive Summary The March 2020 SAP Security Patch

Read Article

SAP Security Notes: February 2020 Vulnerabilities and Mitigation

The February 2020 SAP security notes address a high-risk Denial of Service (DoS) vulnerability in the SAP Host Agent and missing input validation vulnerabilities in SAP Landscape Management. These patches require specific configuration changes, including blocking untrusted network access and enabling internal operation checks to secure SAP environments against potential exploits. Executive Summary The February

Read Article

SIEM Integration for SAP: Challenges and Solutions

Integrating SAP logs directly into Security Information and Event Management (SIEM) systems is often a complex and costly process. By leveraging SAP Solution Manager to filter, structure, and enrich security event data, organizations can achieve seamless integration while avoiding the high maintenance and licensing costs associated with direct log ingestion. Watch the Webinar: You can view

Read Article

SAP Security Notes, January 2020: Critical Vulnerability Patches

In January 2020, SAP released critical security notes addressing vulnerabilities in the Business Object Repository (BOR), clickjacking protections for SAP AS ABAP, and a Denial of Service (DOS) flaw in the Internet Communication Manager (ICM). Organizations are advised to review these patches to secure their SAP environments against unauthorized access and system instability. Executive Summary

Read Article
« Page1 … Page14 Page15 Page16 Page17 Page18 … Page27 »
Layer Seven Security Logo
  • Contact Us
  • Request a Demo
  • Our Company
  • Our Customers
  • Our Success Stories
  • Contact Us
  • Request a Demo
  • Our Company
  • Our Customers
  • Our Success Stories
  • Contact Us
  • Request a Demo
  • Our Company
  • Our Customers
  • Our Success Stories
  • Contact Us
  • Request a Demo
  • Our Company
  • Our Customers
  • Our Success Stories
Solutions
  • Cybersecurity Extension for SAP
  • Product Comparison
  • Cybersecurity Extension for SAP
  • Product Comparison
  • Cybersecurity Extension for SAP
  • Product Comparison
  • Cybersecurity Extension for SAP
  • Product Comparison
Services
  • SAP RISE Security Compliance
  • Cybersecurity Assessment
  • Code Vulnerability Assessments
  • Penetration Testing
  • SAP RISE Security Compliance
  • Cybersecurity Assessment
  • Code Vulnerability Assessments
  • Penetration Testing
  • SAP RISE Security Compliance
  • Cybersecurity Assessment
  • Code Vulnerability Assessments
  • Penetration Testing
  • SAP RISE Security Compliance
  • Cybersecurity Assessment
  • Code Vulnerability Assessments
  • Penetration Testing
Resources
  • Threat Reports & Advisories
  • Whitepapers
  • News
  • Threat Reports & Advisories
  • Whitepapers
  • News
  • Threat Reports & Advisories
  • Whitepapers
  • News
  • Threat Reports & Advisories
  • Whitepapers
  • News
Recent News

PHP2Shell: Securing PHP Applications in SAP Environments

SAP Security Notes, October 2026

SAP OVERPASS Update: New Attack Paths Identified and Public Exploit Toolkit Released

PHP2Shell: Securing PHP Applications in SAP Environments

SAP Security Notes, October 2026

SAP OVERPASS Update: New Attack Paths Identified and Public Exploit Toolkit Released

Browse Previous Content
Copyright © 2010-2026 Layer Seven Security Inc. All rights reserved.

Sitemap    Privacy Policy

The Gartner Peer Insights Logo is a trademark and service mark of Gartner, Inc., and/or its affiliates, and is used herein with permission. All rights reserved. Gartner Peer Insights reviews constitute the subjective opinions of individual end users based on their own experiences and do not represent the views of Gartner or its affiliates.

This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.
Layer Seven Security Logo
  • Cybersecurity Extension for SAP
    • Product Information
    • Features
      • SAP RISE Security
      • S/4HANA Migration Security
      • Code Vulnerability Analysis for SAP
      • Artificial Intelligence for SAP Security
      • SIEM Integration for SAP
      • Access Risk Analysis for SAP
      • NIS2 Compliance for SAP
      • Virtual Patching for SAP
    • Buyers Guide
  • Services
    • SAP RISE Security Compliance
    • SAP Cybersecurity Assessment
    • SAP Penetration Testing
    • SAP Code Vulnerability Assessment
  • Success Stories
  • Resources
    • Case Studies
    • Whitepapers
    • News
    • Threat Reports & Advisories
  • Contact Us