SAP CRM and SAP S/4HANA
2 notes since January 2023.
Priority is derived from CVSS, not SAP’s priority: CVSS 9.0 or higher is Critical, 7.0 or higher High, 4.0 or higher Medium, below 4.0 Low. SAP’s own priority is only on SAP for Me (SAP login required).
| Patch Day | Note | Title | Priority (derived from CVSS, not SAP’s priority) | CVSS |
|---|---|---|---|---|
| February 2026 | 3697099 | Code Injection vulnerability in SAP CRM and SAP S/4HANA (Scripting Editor) | Critical | 9.9 |
| March 2025 | 3561861 | Server Side Request Forgery (SSRF) in SAP CRM and SAP S/4 HANA (Interaction Center) | Low | 3.5 |