NetWeaver
3 notes since January 2023.
Priority is derived from CVSS, not SAP’s priority: CVSS 9.0 or higher is Critical, 7.0 or higher High, 4.0 or higher Medium, below 4.0 Low. SAP’s own priority is only on SAP for Me (SAP login required).
| Patch Day | Note | Title | Priority (derived from CVSS, not SAP’s priority) | CVSS |
|---|---|---|---|---|
| March 2024 | 3425682 | Information Disclosure vulnerability in NetWeaver (WSRM) | Medium | 5.3 |
| April 2023 | 3305907 | Directory/Path Traversal vulnerability in SAP NetWeaver. | High | 8.7 |
| March 2023 | 3284550 | XML External Entity (XXE) vulnerability in SAP NetWeaver (SAP Enterprise Portal) | Medium | 6.8 |