SAP Security Patch Day 2025
SAP Security Patch Day 2025: 12 Patch Days, 198 SAP security notes, 25 Critical. Monthly counts, highest CVSS and CISA KEV status.
Priority is derived from CVSS, not SAP’s priority: CVSS 9.0 or higher is Critical, 7.0 or higher High, 4.0 or higher Medium, below 4.0 Low. SAP’s own priority is only on SAP for Me (SAP login required). Coverage: this site is built from SAP’s CVE records, so notes without a CVE, notes with only third-party CVEs (for example Apache or OpenSSL), and updates to earlier notes are not covered. That is about 7% of new notes.
| Patch Day | SAP notes | GitHub advisories | Critical | High | Highest CVSS | KEV |
|---|---|---|---|---|---|---|
| December 2025December 9, 2025 | 12 | 0 | 2 | 4 | 9.9 | 0 |
| November 2025November 11, 2025 | 18 | 0 | 2 | 1 | 10.0 | 0 |
| October 2025October 14, 2025 | 9 | 0 | 2 | 0 | 9.8 | 0 |
| September 2025September 9, 2025 | 19 | 0 | 3 | 3 | 10.0 | 0 |
| August 2025August 12, 2025 | 15 | 0 | 2 | 2 | 9.9 | 0 |
| July 2025July 8, 2025 | 27 | 0 | 5 | 3 | 9.9 | 0 |
| June 2025June 10, 2025 | 14 | 0 | 1 | 5 | 9.6 | 0 |
| May 2025May 13, 2025 | 16 | 0 | 2 | 3 | 10.0 | 1 |
| April 2025April 8, 2025 | 20 | 0 | 4 | 3 | 10.0 | 1 |
| March 2025March 11, 2025 | 19 | 0 | 0 | 2 | 8.8 | 0 |
| February 2025February 11, 2025 | 16 | 0 | 0 | 4 | 8.7 | 0 |
| January 2025January 14, 2025 | 13 | 0 | 2 | 3 | 9.9 | 0 |