Application Interface Framework
4 notes since January 2023.
Priority is derived from CVSS, not SAP’s priority: CVSS 9.0 or higher is Critical, 7.0 or higher High, 4.0 or higher Medium, below 4.0 Low. SAP’s own priority is only on SAP for Me (SAP login required).
| Patch Day | Note | Title | Priority (derived from CVSS, not SAP’s priority) | CVSS |
|---|---|---|---|---|
| April 2023 | 3115598 | Code Injection vulnerability in SAP Application Interface Framework (Message Dashboard) | Medium | 4.4 |
| April 2023 | 3113349 | Code Injection vulnerability in SAP Application Interface Framework (Message Dashboard) | Low | 3.7 |
| April 2023 | 3114489 | Code Injection vulnerability in SAP Application Interface Framework (Message Monitoring) | Low | 3.7 |
| April 2023 | 3117978 | Information Disclosure vulnerability in SAP Application Interface Framework (ODATA service) | Low | 3.1 |