SAP Security Patch Day — March 2024

Exploited 0

Confirmed exploited (CISA KEV, ENISA). "Zero-day" means exploitation was known by the patch day — install these first.

None of this release's vulnerabilities is known to be exploited so far.

Critical 1

• Critical 9.1
  CVE-2024-22127 Public exploit Code Injection vulnerability in SAP NetWeaver AS Java (Administrator Log Viewer plug-in)
  EPSS 1.6%

All vulnerabilities 7