SAP Approuter

2 notes since January 2023.

Priority is derived from CVSS, not SAP’s priority: CVSS 9.0 or higher is Critical, 7.0 or higher High, 4.0 or higher Medium, below 4.0 Low. SAP’s own priority is only on SAP for Me (SAP login required).

Patch Day	Note	Title	Priority (derived from CVSS, not SAP’s priority)	CVSS
July 2026	3720138	HTTP Request Smuggling in SAP Approuter	Critical	9.1
July 2026	3741519	Open Redirect vulnerability in SAP Approuter	High	8.1