Patch days / January 2025

SAP Security Patch Day — January 2025

Tuesday, 14 January 2025

Vulnerabilities: 14
Critical: 2
High: 3
Zero-days: 0
Public exploit: 0

Exploited 0

Confirmed exploited (CISA KEV, ENISA). "Zero-day" means exploitation was known by the patch day — install these first.

None of this release's vulnerabilities is known to be exploited so far.

Critical 2

Critical 9.9
CVE-2025-0066 Information Disclosure vulnerability in SAP NetWeaver AS for ABAP and ABAP Platform (Internet Communication Framework)
Critical 9.9
CVE-2025-0070 Improper Authentication in SAP NetWeaver ABAP Server and ABAP Platform

All vulnerabilities 14

Critical2 Show

High3 Show

Medium9 Show