- Each month, SAP issues critical updates to fortify your systems against potential security threats.
- In August, SAP unveiled 17 new Security Notes and updated 8 previously released notes.
- The most critical vulnerability refers to an authentication bypass in SAP BusinessObjects with
CVSS scores of 9.8.
Vulnerability Types
This month’s patches address a wide range of security issues, including missing authentication checks, server-side request forgery, XML injection, prototype pollution, and information disclosure vulnerabilities.
High-Priority Security Notes
Two ‘Hot News’ Notes address severe issues: an authentication bypass in SAP BusinessObjects and a server-side request forgery in SAP Build Apps, with CVSS scores of 9.8 and 9.1, respectively.
Four “High Priority” Notes address vulnerabilities in various SAP products,with CVSS scores ranging from 7.4 to 8.2.
The remaining notes address medium-severity
vulnerabilities across various SAP products and
components.
SAP Affected Components
Major SAP products impacted include BusinessObjects, Build Apps, BEx Web Java Runtime, S/4HANA, NetWeaver AS Java, and Commerce Cloud.
The Bottom Line
Vicxer professionals resume a few easy recommendations to help manage these critical updates and ensure your systems remain secure:
- Staying informed about the latest SAP vulnerabilities: Keep up with the latest SAP vulnerabilities by subscribing to our free newsletter. You’ll receive timely updates and recommendations to address new security issues.
- Adopt a Patch Management Strategy: Implementing patches promptly is crucial, and new patches can be challenging to incorporate. Vicxer’s dedicated team can assist you in applying updates efficiently and effectively, providing immediate and cost-effective responses to security concerns.
- Monitor and Respond: Continuous monitoring is essential for detecting potential threats and quickly reacting to them. Vicxer offers a premium automatic solution to monitor, detect and response to active exploitation / attacks.
- Assess and Prioritize: Regularly assess your SAP system to identify and prioritize vulnerabilities. Our approach focuses on understanding the risks and recommending the necessary fixes based on their impact on your critical assets, enabling you to allocate resources where they are most needed.