SAP© Security Advisories - 07 2024 - SecurityBridge Cloud Platform

We've created the first of its kind, SecurityBridge Cloud Platform, designed to prioritize SAP patches, updates, and remediation strategies that help prevent disruptions to critical business systems. Our security advisories provide SAP users with valuable insights into the security and business implications of operating SAP.

The user interface is designed to be as intuitive as possible, but we’d love to hear your feedback and suggestions.
We hope you enjoy using it!

× Hey there! Glad you made it.
We have found 16 security advices for you to review.

Severity

SAP© Security advisories 16

System Types

Affected SAP© system types

_{Related note}
3466801

_CVSS
6.9

_{Affected system
type}
SAP Landscape...

_Patchday
2024-07

_{Released
on}
2024/07/09

Description
[CVE-2024-39593] Information Disclosure vulnerability in SAP Landscape Management

Security Advisory

_{Related note}
3476348

_CVSS
4.3

_{Affected system
type}
SAP Enable Now

_Patchday
2024-07

_{Released
on}
2024/07/09

Description
[CVE-2024-39596] Missing Authorization check vulnerability in SAP Enable Now

Security Advisory

_{Related note}
3456952

_CVSS
4.7

_{Affected system
type}
ABAP

_Patchday
2024-07

_{Released
on}
2024/07/09

Description
[CVE-2024-39599] Protection Mechanism Failure in SAP NetWeaver Application Server for ABAP and ABAP Platform

Security Advisory

_{Related note}
3469958

_CVSS
5.0

_{Affected system
type}
ABAP

_Patchday
2024-07

_{Released
on}
2024/07/09

Description
[CVE-2024-37171] Server-Side Request Forgery (SSRF) in SAP Transportation Management (Collaboration Portal)

Security Advisory

_{Related note}
3457354

_CVSS
5.4

_{Affected system
type}
ABAP

_Patchday
2024-07

_{Released
on}
2024/07/09

Description
[CVE-2024-37172] Missing Authorization check in SAP S/4HANA Finance (Advanced Payment Management)

Security Advisory

_{Related note}
3461110

_CVSS
5.0

_{Affected system
type}
SAP GUI

_Patchday
2024-07

_{Released
on}
2024/07/09

Description
[CVE-2024-39600] Information Disclosure vulnerability in SAP GUI for Windows

Security Advisory

_{Related note}
3483344

_CVSS
7.7

_{Affected system
type}
ABAP

_Patchday
2024-07

_{Released
on}
2024/07/09

Description
[CVE-2024-39592] Missing Authorization check in SAP PDCE

Security Advisory

_{Related note}
3483993

_CVSS
5.0

_{Affected system
type}
ABAP

_Patchday
2024-07

_{Released
on}
2024/07/09

Description
[CVE-2024-34689] Prerequisite for Security Note 3458789

Security Advisory

_{Related note}
3468681

_CVSS
6.1

_{Affected system
type}
Java

_Patchday
2024-07

_{Released
on}
2024/07/09

Description
[CVE-2024-34685] Cross-Site Scripting (XSS) vulnerability in SAP NetWeaver Knowledge Management XMLEditor

Security Advisory

_{Related note}
3467377

_CVSS
6.1

_{Affected system
type}
SAP CRM UI

_Patchday
2024-07

_{Released
on}
2024/07/09

Description
[Multiple CVEs] Multiple vulnerabilities in SAP CRM (WebClient UI)

Security Advisory

_{Related note}
3476340

_CVSS
3.3

_{Affected system
type}
SAP Enable Now

_Patchday
2024-07

_{Released
on}
2024/07/09

Description
[CVE-2024-34692] Unrestricted File upload vulnerability in SAP Enable Now

Security Advisory

_{Related note}
3485805

_CVSS
5.0

_{Affected system
type}
ABAP

_Patchday
2024-07

_{Released
on}
2024/07/09

Description
[CVE-2024-34689] Allowlisting of callback-URLs in SAP Business Workflow (WebFlow Services)

Security Advisory

_{Related note}
3490515

_CVSS
7.2

_{Affected system
type}
SAP Commerce

_Patchday
2024-07

_{Released
on}
2024/07/09

Description
[CVE-2024-39597] Improper Authorization Checks on Early Login Composable Storefront B2B sites of SAP Commerce

Security Advisory

_{Related note}
3454858

_CVSS
4.1

_{Affected system
type}
ABAP

_Patchday
2024-07

_{Released
on}
2024/07/09

Description
[CVE-2024-37180] Information Disclosure vulnerability in SAP NetWeaver Application Server for ABAP and ABAP Platform

Security Advisory

_{Related note}
3458789

_CVSS
5.0

_{Affected system
type}
ABAP

_Patchday
2024-07

_{Released
on}
2024/07/09

Description
[CVE-2024-34689] Server-Side Request Forgery in SAP Business Workflow (WebFlow Services)

Security Advisory

_{Related note}
3482217

_CVSS
6.1

_{Affected system
type}
ABAP

_Patchday
2024-07

_{Released
on}
2024/07/09

Description
[CVE-2024-39594] Multiple Cross-Site Scripting (XSS) vulnerabilities in SAP Business Warehouse - Business Planning and Simulation

Security Advisory

Notifications

Severity

SAP© Security advisories 16

System Types

Affected SAP© system types

Related note 3466801

CVSS 6.9

Affected system type SAP Landscape...

Patchday2024-07

Released on2024/07/09

Related note 3476348

CVSS 4.3

Affected system type SAP Enable Now

Patchday2024-07

Released on2024/07/09

Related note 3456952

CVSS 4.7

Affected system type ABAP

Patchday2024-07

Released on2024/07/09

Related note 3469958

CVSS 5.0

Affected system type ABAP

Patchday2024-07

Released on2024/07/09

Related note 3457354

CVSS 5.4

Affected system type ABAP

Patchday2024-07

Released on2024/07/09

Related note 3461110

CVSS 5.0

Affected system type SAP GUI

Patchday2024-07

Released on2024/07/09

Related note 3483344

CVSS 7.7

Affected system type ABAP

Patchday2024-07

Released on2024/07/09

Related note 3483993

CVSS 5.0

Affected system type ABAP

Patchday2024-07

Released on2024/07/09

Related note 3468681

CVSS 6.1

Affected system type Java

Patchday2024-07

Released on2024/07/09

Related note 3467377

CVSS 6.1

Affected system type SAP CRM UI

Patchday2024-07

Released on2024/07/09

Related note 3476340

CVSS 3.3

Affected system type SAP Enable Now

Patchday2024-07

Released on2024/07/09

Related note 3485805

CVSS 5.0

Affected system type ABAP

Patchday2024-07

Released on2024/07/09

Related note 3490515

CVSS 7.2

Affected system type SAP Commerce

Patchday2024-07

Released on2024/07/09

Related note 3454858

CVSS 4.1

Affected system type ABAP

Patchday2024-07

Released on2024/07/09

Related note 3458789

CVSS 5.0

Affected system type ABAP

Patchday2024-07

Released on2024/07/09

_{Related note}
3466801

_CVSS
6.9

_{Affected system
type}
SAP Landscape...

_Patchday
2024-07

_{Released
on}
2024/07/09

_{Related note}
3476348

_CVSS
4.3

_{Affected system
type}
SAP Enable Now

_Patchday
2024-07

_{Released
on}
2024/07/09

_{Related note}
3456952

_CVSS
4.7

_{Affected system
type}
ABAP

_Patchday
2024-07

_{Released
on}
2024/07/09

_{Related note}
3469958

_CVSS
5.0

_{Affected system
type}
ABAP

_Patchday
2024-07

_{Released
on}
2024/07/09

_{Related note}
3457354

_CVSS
5.4

_{Affected system
type}
ABAP

_Patchday
2024-07

_{Released
on}
2024/07/09

_{Related note}
3461110

_CVSS
5.0

_{Affected system
type}
SAP GUI

_Patchday
2024-07

_{Released
on}
2024/07/09

_{Related note}
3483344

_CVSS
7.7

_{Affected system
type}
ABAP

_Patchday
2024-07

_{Released
on}
2024/07/09

_{Related note}
3483993

_CVSS
5.0

_{Affected system
type}
ABAP

_Patchday
2024-07

_{Released
on}
2024/07/09

_{Related note}
3468681

_CVSS
6.1

_{Affected system
type}
Java

_Patchday
2024-07

_{Released
on}
2024/07/09

_{Related note}
3467377

_CVSS
6.1

_{Affected system
type}
SAP CRM UI

_Patchday
2024-07

_{Released
on}
2024/07/09

_{Related note}
3476340

_CVSS
3.3

_{Affected system
type}
SAP Enable Now

_Patchday
2024-07

_{Released
on}
2024/07/09

_{Related note}
3485805

_CVSS
5.0

_{Affected system
type}
ABAP

_Patchday
2024-07

_{Released
on}
2024/07/09

_{Related note}
3490515

_CVSS
7.2

_{Affected system
type}
SAP Commerce

_Patchday
2024-07

_{Released
on}
2024/07/09

_{Related note}
3454858

_CVSS
4.1

_{Affected system
type}
ABAP

_Patchday
2024-07

_{Released
on}
2024/07/09

_{Related note}
3458789

_CVSS
5.0

_{Affected system
type}
ABAP

_Patchday
2024-07

_{Released
on}
2024/07/09

_{Related note}
3482217

_CVSS
6.1

_{Affected system
type}
ABAP

_Patchday
2024-07

_{Released
on}
2024/07/09