Vulnerabilities
SAP MII Flaw Allows Admins to Escalate Privileges on Java Server
A critical vulnerability in SAP Manufacturing Integration and Intelligence lets administrators gain full control of the underlying Java application server.
SAP
Everything Threat Times has reported about SAP: 4 stories, newest first. Part of our Vulnerabilities coverage.
Vulnerabilities
SAP S/4HANA Rule Processing Flaw Allows Arbitrary ABAP Code Execution
A critical vulnerability in SAP S/4HANA allows authenticated attackers with specific privileges to execute arbitrary ABAP code via crafted input.
Vulnerabilities
SAP NetWeaver Visual Composer Flaw Allows Low-Privilege Attackers to Compromise Remote Systems
A critical authorization bypass in SAP NetWeaver Visual Composer 7.50 lets attackers invoke internal operations on remote systems, risking full compromise.
Vulnerabilities
Critical OAuth2 SSRF in SAP Cloud SDK for Python Exposes Client Credentials
A vulnerability in the SAP Cloud SDK for Python allows attackers to redirect token requests, leading to credential theft in multi-tenant BTP applications.