SAP Security Patch Day — September 2024

Tuesday, 10 September 2024

Vulnerabilities: 20
Critical: 0
High: 0
Zero-days: 0
Public exploit: 0

Exploited 0

Confirmed exploited (CISA KEV, ENISA). "Zero-day" means exploitation was known by the patch day — install these first.

None of this release's vulnerabilities is known to be exploited so far.

All vulnerabilities 20

Medium17 Show

Medium 6.5
CVE-2024-45286 Missing Authorization check in SAP Production and Revenue Accounting (Tobin interface)
Medium 6.1
CVE-2024-42378 Cross-Site Scripting (XSS) in eProcurement on S/4HANA
Medium 6.1
CVE-2024-45279 Cross-Site Scripting (XSS) vulnerability in SAP NetWeaver Application Server for ABAP (CRM Blueprint Application Builder Panel)
Medium 6.0
CVE-2024-45283 Information disclosure vulnerability in SAP NetWeaver AS for Java (Destination Service)
Medium 5.8
CVE-2024-45281 DLL hijacking vulnerability in SAP BusinessObjects Business Intelligence Platform
Medium 5.4
CVE-2024-42371 Multiple vulnerabilities in SAP NetWeaver Application Server for ABAP and ABAP Platform
Medium 5.4
CVE-2024-44117 Multiple vulnerabilities in SAP NetWeaver Application Server for ABAP and ABAP Platform
Medium 5.4
CVE-2024-45285 Multiple vulnerabilities in SAP NetWeaver Application Server for ABAP and ABAP Platform
Medium 4.8
CVE-2024-45280 Cross-Site Scripting (XSS) Vulnerability in SAP NetWeaver AS Java (Logon Application)
Medium 4.7
CVE-2024-44120 Cross-Site Scripting (XSS) vulnerability in SAP NetWeaver Enterprise Portal
Medium 4.3
CVE-2024-41729 Information Disclosure vulnerability in the SAP NetWeaver BW (BEx Analyzer)
Medium 4.3
CVE-2024-42380 Multiple vulnerabilities in SAP NetWeaver Application Server for ABAP and ABAP Platform
Medium 4.3
CVE-2024-44112 Missing Authorization check in SAP for Oil & Gas (Transportation and Distribution)
Medium 4.3
CVE-2024-44113 Information Disclosure vulnerability in the SAP Business Warehouse (BEx Analyzer)
Medium 4.3
CVE-2024-44115 Multiple vulnerabilities in SAP NetWeaver Application Server for ABAP and ABAP Platform
Medium 4.3
CVE-2024-44116 Multiple vulnerabilities in SAP NetWeaver Application Server for ABAP and ABAP Platform
Medium 4.3
CVE-2024-44121 Information Disclosure in SAP S/4 HANA (Statutory Reports)

Low3 Show