In the course of the monthly security patch day, the software manufacturer SAP eliminated vulnerabilities from several products that were classified as critical. In addition, there are vulnerability fixes with a “high” rating for three products and five “medium” fixes.

SAP’s Advisory for the Security Patchday summarizes as always, all updates together. The summary also points to some updated safety instructions from the previous months, which users of the relevant products should also take a look at.

Information on ” High “and” Critical “vulnerabilities The critical vulnerabilities concern

the Java stack of the Solution Manager (Version 7.2), Data Services (4.2), AS ABAP (versions 2011 _ 1 _ 620, 2011_1_640, 2011_1_700, 2011_1_710, 2011_1_730, 2011_1_731 and 2011 _ 1 _ 752, 2020) and S / 4 HANA (DMIS) in the versions 101, 102, 103, 104 and 105 and the NetWeaver AS for Java (versions 7. 20, 7. 30, 7. 31, 7. 40 and 7. 50). The “High” – Vulnerabilities are in

SAP Fiori Launchpad (NewsTile Application) 750, 751, 752, 753,754 and 755 and in Commerce Cloud together with “Accelerator Payment Mock” (1808, 1811, 1905 and 2005). Details on The “Critical”, “High” and “Medium” vulnerabilities, some of which can be exploited remotely and without authentication, are provided by the CVE descriptions linked in SAP’s Advisory. Registered SAP customers can also find additional information in the linked security notes in the password-protected support area.

(ovw)