CybersecurityUpdated Yesterday

SAP patches four CVSS 10.0 flaws.

SAP's November security update covers 35 vulnerabilities, but four sit at the sharp end: SAP rates each CVSS 10.0, the maximum. All four can be exploited without authentication, and two could allow remote code execution. The affected list spans NetWeaver AS ABAP and ABAP Platform, Web Dispatcher, and SAP Gateway. So the 35-item total isn't the number to remember on its own: within that broader update are four maximum-severity flaws, and none asks an attacker to log in first.

2 publishers2 reports

Coverage started Yesterday