Patch days / January 2024

SAP Security Patch Day — January 2024

Tuesday, 9 January 2024

Vulnerabilities: 7
Critical: 0
High: 3
Zero-days: 0
Public exploit: 0

Exploited 0

Confirmed exploited (CISA KEV, ENISA). "Zero-day" means exploitation was known by the patch day — install these first.

None of this release's vulnerabilities is known to be exploited so far.

All vulnerabilities 7

High3 Show

High 8.4
CVE-2024-21737 Code Injection vulnerability in SAP Application Interface Framework (File Adapter)
High 7.4
CVE-2024-22125 Information Disclosure vulnerability in Microsoft Edge browser extension (SAP GUI connector for Microsoft Edge)
High 7.3
CVE-2024-21735 Improper Authorization check in SAP LT Replication Server

Medium3 Show

Low1 Show

Low 3.7
CVE-2024-21734 URL Redirection vulnerability in SAP Marketing (Contacts App)