SAP© Security Advisories - 12 2024 - Severity Medium

We've created the first of its kind, SecurityBridge Cloud Platform, designed to prioritize SAP patches, updates, and remediation strategies that help prevent disruptions to critical business systems. Our security advisories provide SAP users with valuable insights into the security and business implications of operating SAP.

The user interface is designed to be as intuitive as possible, but we’d love to hear your feedback and suggestions.
We hope you enjoy using it!

× Hey there! Glad you made it.
We have found 6 security advices for you to review.

Severity

SAP© Security advisories 6

System Types

Affected SAP© system types

_{Related note}
3351041

_CVSS
5.3

_{Affected system
type}
Java

_Patchday
2024-12

_{Released
on}
2024/12/10

Description
[CVE-2024-47582] XML Entity Expansion Vulnerability in SAP NetWeaver AS JAVA

Security Advisory

_{Related note}
3515653

_CVSS
4.3

_{Affected system
type}
BI/BO platform

_Patchday
2024-12

_{Released
on}
2024/12/10

Description
Update 1 to Security Note 3433545: [CVE-2024-42375] Multiple Unrestricted File Upload vulnerabilities in SAP BusinessObjects Business Intelligence Platform

Security Advisory

_{Related note}
3433545

_CVSS
4.3

_{Affected system
type}
BI/BO platform

_Patchday
2024-12

_{Released
on}
2024/08/13

Description
[CVE-2024-42375] Multiple Unrestricted File Upload vulnerabilities in SAP BusinessObjects Business Intelligence Platform

Security Advisory

_{Related note}
3524933

_CVSS
5.3

_{Affected system
type}
BI/BO platform

_Patchday
2024-12

_{Released
on}
2024/12/10

Description
[CVE-2024-32732] Information Disclosure vulnerability in SAP BusinessObjects Business Intelligence platform

Security Advisory

_{Related note}
3536361

_CVSS
4.3

_{Affected system
type}
ABAP

_Patchday
2024-12

_{Released
on}
2024/12/10

Description
[CVE-2024-47585] Missing Authorization check in SAP NetWeaver Application Server for ABAP and ABAP Platform

Security Advisory

_{Related note}
3522332

_CVSS
4.2

_{Affected system
type}
ABAP

_Patchday
2024-12

_{Released
on}
2024/11/26

Description
[CVE-2024-47581] Missing Authorization check in SAP HCM (Approve Timesheets version 4)

Security Advisory

Notifications

Severity

SAP© Security advisories 6

System Types

Affected SAP© system types

Related note 3351041

CVSS 5.3

Affected system type Java

Patchday2024-12

Released on2024/12/10

Related note 3515653

CVSS 4.3

Affected system type BI/BO platform

Patchday2024-12

Released on2024/12/10

Related note 3433545

CVSS 4.3

Affected system type BI/BO platform

Patchday2024-12

Released on2024/08/13

Related note 3524933

CVSS 5.3

Affected system type BI/BO platform

Patchday2024-12

Released on2024/12/10

Related note 3536361

CVSS 4.3

Affected system type ABAP

Patchday2024-12

Released on2024/12/10

Related note 3522332

CVSS 4.2

Affected system type ABAP

Patchday2024-12

Released on2024/11/26

_{Related note}
3351041

_CVSS
5.3

_{Affected system
type}
Java

_Patchday
2024-12

_{Released
on}
2024/12/10

_{Related note}
3515653

_CVSS
4.3

_{Affected system
type}
BI/BO platform

_Patchday
2024-12

_{Released
on}
2024/12/10

_{Related note}
3433545

_CVSS
4.3

_{Affected system
type}
BI/BO platform

_Patchday
2024-12

_{Released
on}
2024/08/13

_{Related note}
3524933

_CVSS
5.3

_{Affected system
type}
BI/BO platform

_Patchday
2024-12

_{Released
on}
2024/12/10

_{Related note}
3536361

_CVSS
4.3

_{Affected system
type}
ABAP

_Patchday
2024-12

_{Released
on}
2024/12/10

_{Related note}
3522332

_CVSS
4.2

_{Affected system
type}
ABAP

_Patchday
2024-12

_{Released
on}
2024/11/26