SAP Security Notes, March 2021
The March 2021 SAP Security Notes address three critical vulnerabilities, including a code injection flaw in SAP Manufacturing Integration and Intelligence (MII), an authorization check failure in SAP NetWeaver AS Java, and an authentication bypass in SAP HANA installations configured with LDAP services. In March 2021, SAP released security patches to address significant vulnerabilities across […]
SAP Security Notes: February 2021 Advisories
The February 2021 SAP security updates addressed critical vulnerabilities across key enterprise platforms, most notably a remote code execution (RCE) flaw in SAP Commerce. Organizations using SAP Commerce, SAP Business Warehouse, SAP S/4HANA, and SAP ECC were advised to review and apply these specific security notes to mitigate unauthorized access and code injection risks. Executive […]
SAP Security Notes: January 2021 Summary
The January 2021 SAP Security Notes address several critical vulnerabilities, including code injection flaws in SAP Business Warehouse and a high-risk Denial of Service (DoS) vulnerability in SAP NetWeaver. These patches are essential for maintaining system integrity, preventing unauthorized command execution, and ensuring proper authorization checks across SAP environments. Executive Summary The January 2021 SAP […]
SAP Security Notes: December 2020 Vulnerability Summary
The December 2020 SAP security update addresses three critical vulnerabilities, including OS command injection in SAP Business Warehouse, missing authentication in SAP NetWeaver AS Java P2P cluster communication, and a privilege escalation flaw in the UDDI server. These updates are essential for maintaining system integrity and preventing unauthorized administrative access. Executive Summary The December 2020 […]
SAP Security Notes: November 2020 Advisories
November 2020 saw critical SAP security patches addressing code injection, remote execution, and privilege escalation vulnerabilities. Key notes include 2973735, 2982840, 2985866, 2890213, and 2979062, which remediate severe flaws across SAP AS ABAP, S/4 HANA, Data Services, Solution Manager, and NetWeaver. The November 2020 SAP security updates focused on high-severity vulnerabilities that could allow attackers to compromise system integrity and […]
SAP Security Notes: October 2020 Vulnerability Summary
The October 2020 SAP Security Notes address several critical vulnerabilities, including an OS command injection flaw in CA Introscope Enterprise Manager. Security teams should prioritize patching SAP Solution Manager and SAP Focused Run environments, alongside addressing identified issues in SAP NetWeaver and the SAP Business Objects Business Intelligence Platform. Executive Summary The October 2020 release […]
SAP Security Notes: September 2020 Critical Updates
The September 2020 SAP security patch cycle addresses critical vulnerabilities, including a code injection flaw in SAP Business Warehouse, an authenticated attack vector in SAP Marketing, and an OS command injection vulnerability in NetWeaver AS ABAP. Organizations running these platforms should review the identified SAP Security Notes to prioritize patching. The September 2020 SAP security […]
SAP Security Notes: August 2020 Advisories
The August 2020 SAP Security Notes address several critical vulnerabilities across SAP Knowledge Management, NetWeaver AS JAVA, and BusinessObjects Business Intelligence. These patches mitigate risks including unauthorized code execution, broken authentication, and potential denial-of-service attacks, requiring immediate attention from security administrators to secure SAP environments. Executive Summary In August 2020, SAP released a series of […]
SAP Security Notes: July 2020 Vulnerability Updates
The July 2020 SAP Security Notes address three high-priority vulnerabilities, most notably the critical RECON vulnerability in NetWeaver Application Server Java (AS Java). These patches resolve missing authentication flaws, information disclosure risks, and configuration vulnerabilities to protect SAP systems and connected environments from unauthorized code execution and data exposure. Executive Summary The July 2020 SAP […]
SAP Security Notes: June 2020 Advisories
The June 2020 SAP Security Notes address a critical remote code execution vulnerability in SAP Liquidity Management for Banking, updates for hard-coded credentials in SAP Commerce, and privilege escalation risks in SAP SuccessFactors Recruiting. Organizations should prioritize patching these components to maintain system integrity and security. Executive Summary In June 2020, SAP released several critical […]