Patch days / September 2023

SAP Security Patch Day — September 2023

Tuesday, 12 September 2023

Vulnerabilities: 12
Critical: 2
High: 2
Zero-days: 0
Public exploit: 0

Exploited 0

Confirmed exploited (CISA KEV, ENISA). "Zero-day" means exploitation was known by the patch day — install these first.

None of this release's vulnerabilities is known to be exploited so far.

Critical 2

Critical 9.9
CVE-2023-40622 Information Disclosure vulnerability in SAP BusinessObjects Business Intelligence Platform (Promotion Management)
Critical 9.8
CVE-2023-40309 Missing Authorization check in SAP CommonCryptoLib

All vulnerabilities 12

Critical2 Show

High2 Show

Medium6 Show

Low2 Show