Vulnerabilities
SAP has released patches for multiple insecure deserialization vulnerabilities in NetWeaver that could lead to full system compromise.
Hi, what are you looking for?
SecurityWeek
All posts tagged "SAP"
Vulnerabilities
SAP has fixed a critical NetWeaver vulnerability allowing attackers to bypass authorization checks and escalate their privileges.
Malware & Threats
Two ransomware groups and several Chinese APTs have been exploiting two recent SAP NetWeaver vulnerabilities.
Vulnerabilities
SAP has released 16 new security notes on its May 2025 Security Patch Day, including a note dealing with another critical NetWeaver vulnerability exploited...
Vulnerabilities
Hundreds of SAP NetWeaver instances hacked via a zero-day that allows remote code execution, not only arbitrary file uploads, as initially believed.
Vulnerabilities
Threat actors are revisiting SAP NetWeaver instances to leverage webshells deployed via a recent zero-day vulnerability.
Vulnerabilities
More than 400 SAP NetWeaver servers are impacted by CVE-2025-31324, an exploited remote code execution vulnerability.
Vulnerabilities
A zero-day vulnerability in SAP NetWeaver potentially affects more than 10,000 internet-facing applications.
Vulnerabilities
SAP released 20 security notes on April 2025 patch day, including three addressing critical code injection and authentication bypass flaws.
Vulnerabilities
SAP released 21 new security notes and updated three security notes on March 2025 security patch day.
Vulnerabilities
SAP has released 19 new and two updated security notes on its February 2025 patch day, including six notes for high-severity vulnerabilities.
Vulnerabilities
SAP has released 14 security notes on January 2025 Patch Day, including two addressing critical vulnerabilities in NetWeaver.
Vulnerabilities
SAP has released patches for 16 vulnerabilities, including a critical-severity SSRF bug in NetWeaver (Adobe Document Services).
Vulnerabilities
SAP has released 12 new and updated security notes on October 2024 patch day, including one that fixes a critical flaw in BusinessObjects.
Vulnerabilities
SAP has released patches for multiple missing authorization check and information disclosure vulnerabilities on its September 2024 Security Patch Day.
Vulnerabilities
SAP has released 25 security notes on August 2024 Security Patch Day, including for critical vulnerabilities in BusinessObjects and Build Apps.
Artificial Intelligence
SAP patches AI Core vulnerabilities allowing attackers to access customer data and take over the service.
Application Security
Patch Tuesday: Enterprise software vendor SAP releases patches for high-severity vulnerabilities in multiple products and tools.
Vulnerabilities
SAP has released 10 new security notes on June 2024 Security Patch Day, including two addressing high-severity vulnerabilities.
Vulnerabilities
SAP has released 14 new and three updated security notes on its May 2024 Security Patch Day.
Vulnerabilities
CVE-2026-41709 allows attackers with administrative privileges to perform operations without being logged.
Vulnerabilities
Malware & Threats
Cybercrime
Artem Stryzhak was sentenced to 70 months in prison after pleading guilty to using Nefilim ransomware in attacks.
Cybersecurity Funding
Vulnerabilities
