SAP S/4HANA and SAP SCM

1 notes since January 2023.

Priority is derived from CVSS, not SAP’s priority: CVSS 9.0 or higher is Critical, 7.0 or higher High, 4.0 or higher Medium, below 4.0 Low. SAP’s own priority is only on SAP for Me (SAP login required).

Patch Day	Note	Title	Priority (derived from CVSS, not SAP’s priority)	CVSS
July 2025	3618955	Code Injection vulnerability in SAP S/4HANA and SAP SCM (Characteristic Propagation)	Critical	9.9