SAP-Patchday: Kritische Lücken in SAP NetWeaver und weitere Schwachstellen
Teaser from the source
Zum Juni-Patchday kümmert sich SAP um 15 neue Schwachstellen in mehreren Produkten. Gleich drei kritische betreffen NetWeaver.
This is the RSS-feed teaser. Read the full article at the original source.
Read at heise SecurityMore on NetWeaver
Other advisories
- MediumCVE-2026-89131SAP NetWeaver Enterprise Portal: Cross-Site-Request-Forgery (CSRF)
- MediumCVE-2026-89129SAP NetWeaver AS Java (Web Services): Server-Side-Request-Forgery (SSRF)
- MediumCVE-2026-89128SAP NetWeaver AS Java (Process Integration Test Tool): fehlende Autorisierung
- HighCVE-2026-89114SAP NetWeaver AS Java EDM Application: fehlende Autorisierung
- HighCVE-2026-76973SAP NetWeaver and ABAP Platform (SAP Message Server): Ganzzahlüberlauf
- HighCVE-2026-76970SAP NetWeaver and ABAP Platform: Schreiben außerhalb des zugewiesenen Speichers (Out-of-bounds Write)
- HighCVE-2026-76966SAP NetWeaver and ABAP Platform: Umgehung der Authentifizierung durch Replay
- CriticalCVE-2026-76965SAP NetWeaver and ABAP Platform: offengelegte gefährliche Funktion
Other news entries
- NCSC-2026-0485 [1.00] [M/H] Kwetsbaarheden verholpen in SAP-productenNewsNCSC-NL
- SAP patches ICM2SHELL and PROXYGATE maximum severity flawsNewsBleepingComputer
- SAP Patches Four CVSS 10.0 Flaws, Including Two Enabling Remote Code ExecutionNewsThe Hacker News
- Attackers Searching for SAP Netweaver Webshells, (Mon, Nov 9th)NewsSANS ISC Diary
- SAP Patches Critical NetWeaver, S/4HANA VulnerabilitiesNewsSecurityWeek
- NCSC-2026-0356 [1.00] [M/H] Kwetsbaarheden verholpen in diverse SAP-productenNewsNCSC-NL
- NCSC-2026-0230 [1.01] [M/H] Kwetsbaarheden verholpen in SAP-productenNewsNCSC-NL
- SAP Patches CVSS 9.9 NetWeaver ABAP Flaw That Could Expose or Modify DataNewsThe Hacker News
ID