SAP© Security Advisories - 10 2024 - Severity Medium

We've created the first of its kind, SecurityBridge Cloud Platform, designed to prioritize SAP patches, updates, and remediation strategies that help prevent disruptions to critical business systems. Our security advisories provide SAP users with valuable insights into the security and business implications of operating SAP.

The user interface is designed to be as intuitive as possible, but we’d love to hear your feedback and suggestions.
We hope you enjoy using it!

× Hey there! Glad you made it.
We have found 10 security advices for you to review.

Severity

SAP© Security advisories 10

System Types

Affected SAP© system types

_{Related note}
3477359

_CVSS
6.0

_{Affected system
type}
Java

_Patchday
2024-10

_{Released
on}
2024/09/10

Description
[CVE-2024-45283] Information disclosure vulnerability in SAP NetWeaver AS for Java (Destination Service)

Security Advisory

_{Related note}
3503462

_CVSS
5.4

_{Affected system
type}
Java

_Patchday
2024-10

_{Released
on}
2024/10/08

Description
[CVE-2024-47594] Cross-Site Scripting (XSS) vulnerability in SAP NetWeaver Enterprise Portal (KMC)

Security Advisory

_{Related note}
3520100

_CVSS
4.3

_{Affected system
type}
SAP HANA Client

_Patchday
2024-10

_{Released
on}
2024/10/08

Description
[CVE-2024-45277] Prototype Pollution vulnerability in SAP HANA Client

Security Advisory

_{Related note}
3251893

_CVSS
4.3

_{Affected system
type}
ABAP

_Patchday
2024-10

_{Released
on}
2024/09/24

Description
[CVE-2024-45282] HTTP Verb Tampering in SAP S/4 HANA(Manage Bank Statements)

Security Advisory

_{Related note}
3479293

_CVSS
4.3

_{Affected system
type}
ABAP

_Patchday
2024-10

_{Released
on}
2024/08/13

Description
[CVE-2024-42373] Missing Authorization Check in SAP Student Life Cycle Management (SLcM)

Security Advisory

_{Related note}
3525971

_CVSS
4.3

_{Affected system
type}
ABAP

_Patchday
2024-10

_{Released
on}
2024/10/10

Description
Other vulnerability in service UI_PRODUCTIONVERSION

Security Advisory

_{Related note}
3454858

_CVSS
4.1

_{Affected system
type}
ABAP

_Patchday
2024-10

_{Released
on}
2024/07/09

Description
[CVE-2024-37180] Information Disclosure vulnerability in SAP NetWeaver Application Server for ABAP and ABAP Platform

Security Advisory

_{Related note}
3495876

_CVSS
6.5

_{Affected system
type}
Sybase platform

_Patchday
2024-10

_{Released
on}
2024/08/13

Description
[Multiple CVEs] Multiple vulnerabilities in SAP Replication Server (FOSS)

Security Advisory

_{Related note}
3507545

_CVSS
5.4

_{Affected system
type}
SAP Commerce / SAP...

_Patchday
2024-10

_{Released
on}
2024/10/08

Description
[CVE-2024-45278] Cross-Site Scripting (XSS) vulnerability in SAP Commerce Backoffice

Security Advisory

_{Related note}
3481588

_CVSS
4.3

_{Affected system
type}
ABAP

_Patchday
2024-10

_{Released
on}
2024/09/10

Description
[CVE-2024-41729] Information Disclosure vulnerability in the SAP NetWeaver BW (BEx Analyzer)

Security Advisory

Notifications

Severity

SAP© Security advisories 10

System Types

Affected SAP© system types

Related note 3477359

CVSS 6.0

Affected system type Java

Patchday2024-10

Released on2024/09/10

Related note 3503462

CVSS 5.4

Affected system type Java

Patchday2024-10

Released on2024/10/08

Related note 3520100

CVSS 4.3

Affected system type SAP HANA Client

Patchday2024-10

Released on2024/10/08

Related note 3251893

CVSS 4.3

Affected system type ABAP

Patchday2024-10

Released on2024/09/24

Related note 3479293

CVSS 4.3

Affected system type ABAP

Patchday2024-10

Released on2024/08/13

Related note 3525971

CVSS 4.3

Affected system type ABAP

Patchday2024-10

Released on2024/10/10

Related note 3454858

CVSS 4.1

Affected system type ABAP

Patchday2024-10

Released on2024/07/09

Related note 3495876

CVSS 6.5

Affected system type Sybase platform

Patchday2024-10

Released on2024/08/13

Related note 3507545

CVSS 5.4

Affected system type SAP Commerce / SAP...

Patchday2024-10

Released on2024/10/08

Related note 3481588

CVSS 4.3

Affected system type ABAP

Patchday2024-10

Released on2024/09/10

_{Related note}
3477359

_CVSS
6.0

_{Affected system
type}
Java

_Patchday
2024-10

_{Released
on}
2024/09/10

_{Related note}
3503462

_CVSS
5.4

_{Affected system
type}
Java

_Patchday
2024-10

_{Released
on}
2024/10/08

_{Related note}
3520100

_CVSS
4.3

_{Affected system
type}
SAP HANA Client

_Patchday
2024-10

_{Released
on}
2024/10/08

_{Related note}
3251893

_CVSS
4.3

_{Affected system
type}
ABAP

_Patchday
2024-10

_{Released
on}
2024/09/24

_{Related note}
3479293

_CVSS
4.3

_{Affected system
type}
ABAP

_Patchday
2024-10

_{Released
on}
2024/08/13

_{Related note}
3525971

_CVSS
4.3

_{Affected system
type}
ABAP

_Patchday
2024-10

_{Released
on}
2024/10/10

_{Related note}
3454858

_CVSS
4.1

_{Affected system
type}
ABAP

_Patchday
2024-10

_{Released
on}
2024/07/09

_{Related note}
3495876

_CVSS
6.5

_{Affected system
type}
Sybase platform

_Patchday
2024-10

_{Released
on}
2024/08/13

_{Related note}
3507545

_CVSS
5.4

_{Affected system
type}
SAP Commerce / SAP...

_Patchday
2024-10

_{Released
on}
2024/10/08

_{Related note}
3481588

_CVSS
4.3

_{Affected system
type}
ABAP

_Patchday
2024-10

_{Released
on}
2024/09/10