The Onapsis Blog

The world of business-critical application security is dynamic, with new developments happening on a continuous basis. Check out our blog for recommendations, insights and observations on the latest news for securing your SAP®, Oracle® and Salesforce applications.

SAP Security Notes

SAP Security Patch Day May 2022: Spring4Shell vulnerability has been patched in six SAP applications
05/10/2022 | By
Thomas Fritsch
|
SAP Security

SAP Security Patch Day May 2022: Spring4Shell Vulnerability Has Been Patched in Six SAP Applications

SAP has released 17 new and updated SAP Security Notes in its May 2022 patch release, including the notes that were released since last patch day. As part of this month’s patch release, there are four HotNews notes and two High Priority notes.
SAP Security Patch Day April 2022: In Focus: Spring4Shell and SAP MII
04/12/2022 | By
Thomas Fritsch
|
SAP Security

SAP Security Patch Day April 2022: In Focus: Spring4Shell and SAP MII

SAP’s April Patch Tuesday requires special attention. The Spring4Shell vulnerability, CVE-2022-22965, was recently detected and has been successfully exploited, as noted by researchers. Onapsis Research Labs contributed to a serious vulnerability in SAP MII that could lead to a full compromise of the server in patching hosting the application.
SAP Security Patch Day February 2022: Severe HTTP Smuggling Vulnerabilities in SAP NetWeaver
02/08/2022 | By
Thomas Fritsch
|
SAP Security

SAP Security Patch Day February 2022: Severe HTTP Smuggling Vulnerabilities in SAP NetWeaver

SAP’s February Patch Tuesday brings new extremely critical vulnerabilities in all SAP applications that are based on SAP NetWeaver. SAP, CISA, and Onapsis strongly advise all impacted organizations to prioritize patching these affected systems as soon as possible.
SAP Security Patch Day November 2021: Critical Patch for ABAP Platform Kernel
11/09/2021 | By
Thomas Fritsch
|
SAP Security

SAP Security Patch Day November 2021: Critical Patch for ABAP Platform Kernel

SAP’s November Patch Day contained 11 notes in total with only three new notes above CVSS 7.0, a record low number for the year. Nevertheless, the lower-rated notes should not be left unaddressed as some of these vulnerabilities can be used to launch follow-up attacks, e.g., through impersonation of users or exploiting transport permissions.

Secure your 
business-critical SAP,
Oracle, Salesforce
and SaaS apps

Get a firsthand look at the visibility, reporting and automation capabilities provided by The Onapsis Platform by scheduling a personalized demo with our application security experts.

Request a demo