SAP© Security Advisories - 07 2023 - SecurityBridge Cloud Platform

We've created the first of its kind, SecurityBridge Cloud Platform, designed to prioritize SAP patches, updates, and remediation strategies that help prevent disruptions to critical business systems. Our security advisories provide SAP users with valuable insights into the security and business implications of operating SAP.

The user interface is designed to be as intuitive as possible, but we’d love to hear your feedback and suggestions.
We hope you enjoy using it!

× Hey there! Glad you made it.
We have found 15 security advices for you to review.

Severity

SAP© Security advisories 15

System Types

Affected SAP© system types

_{Related note}
3326769

_CVSS
6.1

_{Affected system
type}
SAP Enable Now

_Patchday
2023-07

_{Released
on}
2023/07/11

Description
[Multiple CVEs] Multiple Vulnerabilities in SAP Enable Now

Security Advisory

_{Related note}
3352058

_CVSS
7.2

_{Affected system
type}
Java

_Patchday
2023-07

_{Released
on}
2023/07/11

Description
[CVE-2023-36925] Unauthenticated blind SSRF in SAP Solution Manager (Diagnostics agent)

Security Advisory

_{Related note}
3318850

_CVSS
6.0

_{Affected system
type}
Kernel

_Patchday
2023-07

_{Released
on}
2023/07/11

Description
[CVE-2023-35874] Improper authentication vulnerability in SAP NetWeaver AS ABAP and ABAP Platform

Security Advisory

_{Related note}
3348145

_CVSS
7.2

_{Affected system
type}
Java

_Patchday
2023-07

_{Released
on}
2023/07/11

Description
[CVE-2023-36921] Header Injection in SAP Solution Manager (Diagnostic Agent)

Security Advisory

_{Related note}
3320702

_CVSS
5.9

_{Affected system
type}
BI/BO platform

_Patchday
2023-07

_{Released
on}
2023/07/11

Description
[CVE-2023-36917] Password Change rate limit bypass in SAP BusinessObjects Business Intelligence Platform

Security Advisory

_{Related note}
3351410

_CVSS
4.9

_{Affected system
type}
ABAP

_Patchday
2023-07

_{Released
on}
2023/07/11

Description
[CVE-2023-36924] Log Injection vulnerability in SAP ERP Defense Forces and Public Security

Security Advisory

_{Related note}
3343564

_CVSS
6.5

_{Affected system
type}
Java

_Patchday
2023-07

_{Released
on}
2023/07/11

Description
[CVE-2023-35872] Missing Authentication check in SAP NetWeaver Process Integration (Message Display Tool)

Security Advisory

_{Related note}
3331029

_CVSS
7.8

_{Affected system
type}
Sybase platform

_Patchday
2023-07

_{Released
on}
2023/07/11

Description
[CVE-2023-33990] Denial of service (DOS) vulnerability in SAP SQL Anywhere

Security Advisory

_{Related note}
3341211

_CVSS
6.3

_{Affected system
type}
ABAP

_Patchday
2023-07

_{Released
on}
2023/07/11

Description
[CVE-2023-35870] Improper Access Control in SAP S/4HANA (Manage Journal Entry Template)

Security Advisory

_{Related note}
3233899

_CVSS
8.6

_{Affected system
type}
Kernel

_Patchday
2023-07

_{Released
on}
2023/07/11

Description
[CVE-2023-33987] Request smuggling and request concatenation vulnerability in SAP Web Dispatcher

Security Advisory

_{Related note}
3340735

_CVSS
7.7

_{Affected system
type}
Kernel

_Patchday
2023-07

_{Released
on}
2023/07/11

Description
[CVE-2023-35871] Memory Corruption vulnerability in SAP Web Dispatcher

Security Advisory

_{Related note}
3324732

_CVSS
5.3

_{Affected system
type}
Java

_Patchday
2023-07

_{Released
on}
2023/07/11

Description
[CVE-2023-31405] Log Injection vulnerability in SAP NetWeaver AS for Java (Log Viewer)

Security Advisory

_{Related note}
3088078

_CVSS
4.5

_{Affected system
type}
BI/BO platform

_Patchday
2023-07

_{Released
on}
2023/07/11

Description
[CVE-2023-33992] Missing Authorization Check in SAP Business Warehouse and SAP BW/4HANA

Security Advisory

_{Related note}
3343547

_CVSS
6.5

_{Affected system
type}
Java

_Patchday
2023-07

_{Released
on}
2023/07/11

Description
[CVE-2023-35873] Missing Authentication check in SAP NetWeaver Process Integration (Runtime Workbench)

Security Advisory

_{Related note}
3331376

_CVSS
8.7

_{Affected system
type}
ABAP

_Patchday
2023-07

_{Released
on}
2023/07/11

Description
[CVE-2023-33989] Directory Traversal vulnerability in SAP NetWeaver (BI CONT ADD ON)

Security Advisory

Notifications

Severity

SAP© Security advisories 15

System Types

Affected SAP© system types

Related note 3326769

CVSS 6.1

Affected system type SAP Enable Now

Patchday2023-07

Released on2023/07/11

Related note 3352058

CVSS 7.2

Affected system type Java

Patchday2023-07

Released on2023/07/11

Related note 3318850

CVSS 6.0

Affected system type Kernel

Patchday2023-07

Released on2023/07/11

Related note 3348145

CVSS 7.2

Affected system type Java

Patchday2023-07

Released on2023/07/11

Related note 3320702

CVSS 5.9

Affected system type BI/BO platform

Patchday2023-07

Released on2023/07/11

Related note 3351410

CVSS 4.9

Affected system type ABAP

Patchday2023-07

Released on2023/07/11

Related note 3343564

CVSS 6.5

Affected system type Java

Patchday2023-07

Released on2023/07/11

Related note 3331029

CVSS 7.8

Affected system type Sybase platform

Patchday2023-07

Released on2023/07/11

Related note 3341211

CVSS 6.3

Affected system type ABAP

Patchday2023-07

Released on2023/07/11

Related note 3233899

CVSS 8.6

Affected system type Kernel

Patchday2023-07

Released on2023/07/11

Related note 3340735

CVSS 7.7

Affected system type Kernel

Patchday2023-07

Released on2023/07/11

Related note 3324732

CVSS 5.3

Affected system type Java

Patchday2023-07

Released on2023/07/11

Related note 3088078

CVSS 4.5

Affected system type BI/BO platform

Patchday2023-07

Released on2023/07/11

Related note 3343547

CVSS 6.5

Affected system type Java

Patchday2023-07

Released on2023/07/11

Related note 3331376

CVSS 8.7

Affected system type ABAP

Patchday2023-07

Released on2023/07/11

_{Related note}
3326769

_CVSS
6.1

_{Affected system
type}
SAP Enable Now

_Patchday
2023-07

_{Released
on}
2023/07/11

_{Related note}
3352058

_CVSS
7.2

_{Affected system
type}
Java

_Patchday
2023-07

_{Released
on}
2023/07/11

_{Related note}
3318850

_CVSS
6.0

_{Affected system
type}
Kernel

_Patchday
2023-07

_{Released
on}
2023/07/11

_{Related note}
3348145

_CVSS
7.2

_{Affected system
type}
Java

_Patchday
2023-07

_{Released
on}
2023/07/11

_{Related note}
3320702

_CVSS
5.9

_{Affected system
type}
BI/BO platform

_Patchday
2023-07

_{Released
on}
2023/07/11

_{Related note}
3351410

_CVSS
4.9

_{Affected system
type}
ABAP

_Patchday
2023-07

_{Released
on}
2023/07/11

_{Related note}
3343564

_CVSS
6.5

_{Affected system
type}
Java

_Patchday
2023-07

_{Released
on}
2023/07/11

_{Related note}
3331029

_CVSS
7.8

_{Affected system
type}
Sybase platform

_Patchday
2023-07

_{Released
on}
2023/07/11

_{Related note}
3341211

_CVSS
6.3

_{Affected system
type}
ABAP

_Patchday
2023-07

_{Released
on}
2023/07/11

_{Related note}
3233899

_CVSS
8.6

_{Affected system
type}
Kernel

_Patchday
2023-07

_{Released
on}
2023/07/11

_{Related note}
3340735

_CVSS
7.7

_{Affected system
type}
Kernel

_Patchday
2023-07

_{Released
on}
2023/07/11

_{Related note}
3324732

_CVSS
5.3

_{Affected system
type}
Java

_Patchday
2023-07

_{Released
on}
2023/07/11

_{Related note}
3088078

_CVSS
4.5

_{Affected system
type}
BI/BO platform

_Patchday
2023-07

_{Released
on}
2023/07/11

_{Related note}
3343547

_CVSS
6.5

_{Affected system
type}
Java

_Patchday
2023-07

_{Released
on}
2023/07/11

_{Related note}
3331376

_CVSS
8.7

_{Affected system
type}
ABAP

_Patchday
2023-07

_{Released
on}
2023/07/11