SAP Update

Your review has been sent successfully

2976

Security Alert

● Critical

● High

● Medium

● Low

Warning Date

Severity Level

Warning Number

Target Sector

11 November, 2020

● Critical

2020-2037

All

Description:

SAP has released a security update to address multiple vulnerabilities in the following products:

SAP Solution Manager (JAVA stack, User Experience Monitoring)
- 7.2
SAP Data Services
- 4.2
SAP AS ABAP(DMIS)
- 2011_1_620, 2011_1_640, 2011_1_700, 2011_1_710, 2011_1_730, 2011_1_731, 2011_1_752, 2020
SAP S4 HANA(DMIS)
- 100, 101, 102, 103, 104, 105
SAP NetWeaver (AS JAVA, Knowledge Management, AS ABAP)
- 7.20, 7.30, 7.31, 7.40, 7.50, 751, 752, 753, 754, 755, 782
SAP Fiori Launchpad (News Tile Application)
- 750,751,752,753,754,755
SAP Commerce Cloud
- 1808,1811,1905,2005
SAP Commerce Cloud (Accelerator Payment Mock)
- 1808, 1811, 1905, 2005
BANKING SERVICES FROM SAP 9.0(Bank Analyzer)
- 500
S/4HANA FIN PROD SUBLDGR
- 100
SAP Process Integration (PGP Module – Business-to-Business Add On)
- 1.0
SAP ERP Client for E-Bilanz
- 1.0
SAP ERP
- 600, 602, 603, 604, 605, 606, 616, 617, 618
SAP 3D Visual Enterprise Viewer
- 9

Threats:

Attacker could exploit these vulnerabilities by doing the following:

Best practice and Recommendations:

The CERT team encourages users to review SAP security advisory and apply the necessary updates:

Last updated at 11 November, 2020