SAP© Security Advisories - 05 2023 - SecurityBridge Cloud Platform

We've created the first of its kind, SecurityBridge Cloud Platform, designed to prioritize SAP patches, updates, and remediation strategies that help prevent disruptions to critical business systems. Our security advisories provide SAP users with valuable insights into the security and business implications of operating SAP.

The user interface is designed to be as intuitive as possible, but we’d love to hear your feedback and suggestions.
We hope you enjoy using it!

× Yikes, there is work to do!
This time we found critical correction advisiories. We count 20 and the highest CVSS score is 9.8.

Severity

SAP© Security advisories 20

System Types

Affected SAP© system types

_{Related note}
2335198

_CVSS
2.8

_{Affected system
type}
ABAP

_Patchday
2023-05

_{Released
on}
2023/05/09

Description
[CVE-2023-32112] Missing Authorization Check in Vendor Master Hierarchy

Security Advisory

_{Related note}
3320145

_CVSS
7.5

_{Affected system
type}
SAP Commerce

_Patchday
2023-05

_{Released
on}
2023/05/09

Description
Denial of service (DOS) in SAP Commerce

Security Advisory

_{Related note}
3326210

_CVSS
7.1

_{Affected system
type}
ABAP

_Patchday
2023-05

_{Released
on}
2023/05/09

Description
[CVE-2023-30743] Improper Neutralization of Input in SAPUI5

Security Advisory

_{Related note}
3323415

_CVSS
8.2

_{Affected system
type}
SAP Integrated...

_Patchday
2023-05

_{Released
on}
2023/05/09

Description
[CVE-2023-29080] Privilege escalation vulnerability in SAP IBP, add-in for Microsoft Excel

Security Advisory

_{Related note}
3300624

_CVSS
7.5

_{Affected system
type}
SAP PowerDesigner

_Patchday
2023-05

_{Released
on}
2023/05/09

Description
[CVE-2023-32111] Memory Corruption vulnerability in SAP PowerDesigner (Proxy)

Security Advisory

_{Related note}
3313484

_CVSS
6.3

_{Affected system
type}
BI/BO platform

_Patchday
2023-05

_{Released
on}
2023/05/09

Description
[CVE-2023-30740] Information Disclosure vulnerability in SAP BusinessObjects Business Intelligence platform

Security Advisory

_{Related note}
3312892

_CVSS
5.4

_{Affected system
type}
ABAP

_Patchday
2023-05

_{Released
on}
2023/05/09

Description
[CVE-2023-31407] Cross-Site Scripting (XSS) vulnerability in SAP Business Planning and Consolidation

Security Advisory

_{Related note}
3315979

_CVSS
5.4

_{Affected system
type}
ABAP

_Patchday
2023-05

_{Released
on}
2023/05/09

Description
[CVE-2023-29188] Cross-Site Scripting (XSS) vulnerability in SAP CRM WebClient UI

Security Advisory

_{Related note}
3315971

_CVSS
6.1

_{Affected system
type}
ABAP

_Patchday
2023-05

_{Released
on}
2023/05/09

Description
[CVE-2023-30742] Cross-Site Scripting (XSS) vulnerability in SAP CRM (WebClient UI)

Security Advisory

_{Related note}
3309935

_CVSS
6.1

_{Affected system
type}
BI/BO platform

_Patchday
2023-05

_{Released
on}
2023/05/09

Description
[CVE-2023-30741] Cross-Site Scripting (XSS) vulnerability in SAP BusinessObjects Business Intelligence platform

Security Advisory

_{Related note}
3302595

_CVSS
3.7

_{Affected system
type}
BI/BO platform

_Patchday
2023-05

_{Released
on}
2023/05/09

Description
[CVE-2023-28764] Information Disclosure vulnerability in SAP BusinessObjects Business Intelligence platform

Security Advisory

_{Related note}
3320467

_CVSS
7.5

_{Affected system
type}
SAP GUI / Frontend

_Patchday
2023-05

_{Released
on}
2023/05/09

Description
[CVE-2023-32113] Information Disclosure vulnerability in SAP GUI for Windows

Security Advisory

_{Related note}
3038911

_CVSS
5.0

_{Affected system
type}
BI/BO platform

_Patchday
2023-05

_{Released
on}
2023/05/09

Description
[CVE-2023-31404] Information Disclosure in SAP BusinessObjects Business Intelligence Platform (Central Management Service)

Security Advisory

_{Related note}
3307833

_CVSS
9.1

_{Affected system
type}
BI/BO platform

_Patchday
2023-05

_{Released
on}
2023/05/09

Description
[CVE-2023-28762] Information Disclosure in SAP BusinessObjects Business Intelligence Platform (Central Management Console)

Security Advisory

_{Related note}
3321309

_CVSS
7.5

_{Affected system
type}
SAP Commerce

_Patchday
2023-05

_{Released
on}
2023/05/09

Description
Information Disclosure vulnerability in SAP Commerce (Backoffice)

Security Advisory

_{Related note}
3328495

_CVSS
9.8

_{Affected system
type}
Reprise License Manager

_Patchday
2023-05

_{Released
on}
2023/05/09

Description
Multiple vulnerabilities associated with Reprise License Manager 14.2 component used with SAP 3D Visual Enterprise License Manager

Security Advisory

_{Related note}
3317453

_CVSS
8.2

_{Affected system
type}
Java

_Patchday
2023-05

_{Released
on}
2023/05/09

Description
[CVE-2023-30744] Improper access control during application start-up in SAP AS NetWeaver JAVA

Security Advisory

_{Related note}
3319400

_CVSS
6.1

_{Affected system
type}
BI/BO platform

_Patchday
2023-05

_{Released
on}
2023/05/09

Description
[CVE-2023-31406] Cross-Site Scripting (XSS) vulnerability in SAP BusinessObjects Business Intelligence platform

Security Advisory

_{Related note}
1794761

_CVSS
4.2

_{Affected system
type}
ABAP

_Patchday
2023-05

_{Released
on}
2023/05/23

Description
[CVE-2023-32115] SQL Injection in Master Data Synchronization (MDS COMPARE TOOL)

Security Advisory

_{Related note}
3301942

_CVSS
7.9

_{Affected system
type}
SAP Plant Connectivity

_Patchday
2023-05

_{Released
on}
2023/05/23

Description
[CVE-2023-2827] Missing Authentication in SAP Plant Connectivity and Production Connector for SAP Digital Manufacturing

Security Advisory

Notifications

Severity

SAP© Security advisories 20

System Types

Affected SAP© system types

Related note 2335198

CVSS 2.8

Affected system type ABAP

Patchday2023-05

Released on2023/05/09

Related note 3320145

CVSS 7.5

Affected system type SAP Commerce

Patchday2023-05

Released on2023/05/09

Related note 3326210

CVSS 7.1

Affected system type ABAP

Patchday2023-05

Released on2023/05/09

Related note 3323415

CVSS 8.2

Affected system type SAP Integrated...

Patchday2023-05

Released on2023/05/09

Related note 3300624

CVSS 7.5

Affected system type SAP PowerDesigner

Patchday2023-05

Released on2023/05/09

Related note 3313484

CVSS 6.3

Affected system type BI/BO platform

Patchday2023-05

Released on2023/05/09

Related note 3312892

CVSS 5.4

Affected system type ABAP

Patchday2023-05

Released on2023/05/09

Related note 3315979

CVSS 5.4

Affected system type ABAP

Patchday2023-05

Released on2023/05/09

Related note 3315971

CVSS 6.1

Affected system type ABAP

Patchday2023-05

Released on2023/05/09

Related note 3309935

CVSS 6.1

Affected system type BI/BO platform

Patchday2023-05

Released on2023/05/09

Related note 3302595

CVSS 3.7

Affected system type BI/BO platform

Patchday2023-05

Released on2023/05/09

Related note 3320467

CVSS 7.5

Affected system type SAP GUI / Frontend

Patchday2023-05

Released on2023/05/09

Related note 3038911

CVSS 5.0

Affected system type BI/BO platform

Patchday2023-05

Released on2023/05/09

Related note 3307833

CVSS 9.1

Affected system type BI/BO platform

Patchday2023-05

Released on2023/05/09

Related note 3321309

CVSS 7.5

Affected system type SAP Commerce

Patchday2023-05

Released on2023/05/09

_{Related note}
2335198

_CVSS
2.8

_{Affected system
type}
ABAP

_Patchday
2023-05

_{Released
on}
2023/05/09

_{Related note}
3320145

_CVSS
7.5

_{Affected system
type}
SAP Commerce

_Patchday
2023-05

_{Released
on}
2023/05/09

_{Related note}
3326210

_CVSS
7.1

_{Affected system
type}
ABAP

_Patchday
2023-05

_{Released
on}
2023/05/09

_{Related note}
3323415

_CVSS
8.2

_{Affected system
type}
SAP Integrated...

_Patchday
2023-05

_{Released
on}
2023/05/09

_{Related note}
3300624

_CVSS
7.5

_{Affected system
type}
SAP PowerDesigner

_Patchday
2023-05

_{Released
on}
2023/05/09

_{Related note}
3313484

_CVSS
6.3

_{Affected system
type}
BI/BO platform

_Patchday
2023-05

_{Released
on}
2023/05/09

_{Related note}
3312892

_CVSS
5.4

_{Affected system
type}
ABAP

_Patchday
2023-05

_{Released
on}
2023/05/09

_{Related note}
3315979

_CVSS
5.4

_{Affected system
type}
ABAP

_Patchday
2023-05

_{Released
on}
2023/05/09

_{Related note}
3315971

_CVSS
6.1

_{Affected system
type}
ABAP

_Patchday
2023-05

_{Released
on}
2023/05/09

_{Related note}
3309935

_CVSS
6.1

_{Affected system
type}
BI/BO platform

_Patchday
2023-05

_{Released
on}
2023/05/09

_{Related note}
3302595

_CVSS
3.7

_{Affected system
type}
BI/BO platform

_Patchday
2023-05

_{Released
on}
2023/05/09

_{Related note}
3320467

_CVSS
7.5

_{Affected system
type}
SAP GUI / Frontend

_Patchday
2023-05

_{Released
on}
2023/05/09

_{Related note}
3038911

_CVSS
5.0

_{Affected system
type}
BI/BO platform

_Patchday
2023-05

_{Released
on}
2023/05/09

_{Related note}
3307833

_CVSS
9.1

_{Affected system
type}
BI/BO platform

_Patchday
2023-05

_{Released
on}
2023/05/09

_{Related note}
3321309

_CVSS
7.5

_{Affected system
type}
SAP Commerce

_Patchday
2023-05

_{Released
on}
2023/05/09

_{Related note}
3328495

_CVSS
9.8

_{Affected system
type}
Reprise License Manager

_Patchday
2023-05

_{Released
on}
2023/05/09