We've created the first of its kind, SecurityBridge Cloud Platform, designed to prioritize SAP patches, updates, and remediation strategies that help prevent disruptions to critical business systems. Our security advisories provide SAP users with valuable insights into the security and business implications of operating SAP.
We hope you enjoy using it!
This time we found critical correction advisiories. We count 13 and the highest CVSS score is 9.1.
Severity
SAP© Security advisories 13
System Types
Affected SAP© system types
Affected system
type
SAP Commerce
Patchday
2024-08
Released
on
2024/08/13
Description
[CVE-2024-41733] Information Disclosure Vulnerability in SAP Commerce
Affected system
type
SAP Build Apps
Patchday
2024-08
Released
on
2024/08/13
Description
[CVE-2024-29415] Server-Side Request Forgery vulnerability in applications built with SAP Build Apps
Affected system
type
SAP Fiori
Patchday
2024-08
Released
on
2024/08/13
Description
[CVE-2024-41736] Information Disclosure vulnerability in SAP Permit to Work
Affected system
type
Java
Patchday
2024-08
Released
on
2024/08/13
Description
[CVE-2024-42374] XML injection in SAP BEx Web Java Runtime Export Web Service
Affected system
type
ABAP
Patchday
2024-08
Released
on
2024/08/13
Description
[CVE-2024-41734] Missing Authorization check in SAP NetWeaver Application Server ABAP and ABAP Platform
Affected system
type
SAP Commerce
Patchday
2024-08
Released
on
2024/08/13
Description
[CVE-2024-41735] Cross-Site Scripting (XSS) vulnerability in SAP Commerce Backoffice
Affected system
type
ABAP
Patchday
2024-08
Released
on
2024/08/13
Description
[CVE-2024-39591] Missing Authorization check in SAP Document Builder
Affected system
type
ABAP
Patchday
2024-08
Released
on
2024/08/13
Description
[CVE-2024-41737] Server-Side Request Forgery (SSRF) in SAP CRM ABAP (Insights Management)
Affected system
type
BI/BO platform
Patchday
2024-08
Released
on
2024/08/13
Description
[CVE-2024-42375] Multiple Unrestricted File Upload vulnerabilities in SAP BusinessObjects Business Intelligence Platform
Affected system
type
SAP Fiori
Patchday
2024-08
Released
on
2024/07/23
Description
[CVE-2023-30533] Prototype Pollution in SAP S/4 HANA (Manage Supply Protection)
Affected system
type
ABAP
Patchday
2024-08
Released
on
2024/08/13
Description
[CVE-2024-42376] Multiple Missing Authorization Check vulnerabilities in SAP Shared Service Framework
Affected system
type
Kernel / Web Dispatcher
Patchday
2024-08
Released
on
2024/08/13
Description
[CVE-2024-33005] Missing Authorization check in SAP NetWeaver Application Server (ABAP and Java),SAP Web Dispatcher and SAP Content Server.
Affected system
type
ABAP
Patchday
2024-08
Released
on
2024/08/13
Description
[CVE-2024-41732] Improper Access Control in SAP Netweaver Application Server ABAP