Multiple Vulnerabilities in SAP Products Could Allow for Arbitrary Code Execution
Multiple vulnerabilities have been discovered in SAP Products, the most severe of which could allow for arbitrary code execution. SAP NetWeaver is SAP’s technology platform and application server stack (ABAP and Java) that underpins many SAP business applications, including ERP and S/4HANA. SAP Web Dispatcher is a software load balancer and reverse proxy that receives web requests from the internet and forwards them to SAP application servers. SAP Gateway is the component that exposes SAP data and business logic through OData services and manages RFC communication between SAP systems and external applications. SAP ABAP Developer Tools is an eclipse-based development environment for writing,
Read at CIS / MS-ISAC Cybersecurity Advisories
- Vendor
- SAP
- Product
- NetWeaver, S/4HANA / HANA, Solution Manager / Landscape
- Exposure class
- Web platform, Database, Network management
Why it ranks 35 (Notable)
- Product class: web platform, database
- Widely deployed vendor product (SAP)
- CERT coordination
- Recency: items published within 24 hours gain 15, within 72 hours 6, within 7 days 2.
Links
- CIS / MS-ISAC Cybersecurity Advisories (cisecurity.org)
Related coverage
Other items that share a CVE or were clustered with this one.