- Each month, SAP issues critical updates to fortify your systems against potential security threats.
- In September, SAP unveiled 16 new Security Notes and updated 3 previously released notes.
- The most relevant notes refer to updated patches to previously released
critical vulnerabilities .
This month's security notes overview
- At first glance, it appears to be a relatively quiet month with only one HotNews priority note and one High priority note, while the rest are Medium and Low.
- However, a closer look reveals that the two most severe notes are updates to previous ones.
- This underscores the importance of maintaining constant vigilance in cybersecurity, especially when dealing with valuable SAP assets.
Critical
Vulnerabilities:
One ‘Hot News’ Note (#3479478) updating previous vulnerability related with missing authorization in SAP Business Objects Platform.
High-Priority Vulnerabilities:
One “High Priority” Notes
(#3459935) patches
Information an
Disclosure vulnerability in SAP Commerce
Cloud.
Medium-Priority Vulnerabilities:
The remaining notes address
medium and low severity
vulnerabilities, mainly related
with Missing Authorization
Check in RFC-enabled function
modules.
The Bottom Line
Vicxer professionals resume a few easy recommendations to help manage these critical updates and ensure your systems remain secure:
- Staying informed about the latest SAP vulnerabilities: Keep up with the latest SAP vulnerabilities by subscribing to our free newsletter. You’ll receive timely updates and recommendations to address new security issues.
- Adopt a Patch Management Strategy: Implementing patches promptly is crucial, and new patches can be challenging to incorporate. Vicxer’s dedicated team can assist you in applying updates efficiently and effectively, providing immediate and cost-effective responses to security concerns.
- Monitor and Respond: Continuous monitoring is essential for detecting potential threats and quickly reacting to them. Vicxer offers a premium automatic solution to monitor, detect and response to active exploitation / attacks.
- Assess and Prioritize: Regularly assess your SAP system to identify and prioritize vulnerabilities. Our approach focuses on understanding the risks and recommending the necessary fixes based on their impact on your critical assets, enabling you to allocate resources where they are most needed.