Skip to main content

SAP Releases September 2022 Security Updates

SAP has released security updates to address vulnerabilities affecting multiple products

Threat ID:
CC-4167
Threat Severity:
Information only
Published:
14 September 2022 3:14 PM
Report a cyber attack: call 0300 303 5222 or email [email protected]

Summary

SAP has released security updates to address vulnerabilities affecting multiple products

The following platforms are also known to be affected:

  • SAP Knowledge Warehouse, Versions -7.30, 7.31, 7.40, 7.50
  • SAP BusinessObjects Business Intelligence Platform (CMC),Versions -430
  • SAP Access Control, Version -12
  • SAP NetWeaver Enterprise Portal (KMC), Version -7.50
  • SAP NetWeaverASABAP (SAPGUIfor HTML within the Fiori Launchpad), Version -KERNEL 7.77, 7.81, 7.85, 7.89, 7.54
  • SAP NetWeaverASABAP, Versions-KRNL64NUC 7.22, 7.22EXT, 7.49, KRNL64UC 7.22, 7.22EXT, 7.49, 7.53, KERNEL 7.22, 7.49, 7.53, 7.77, 7.81, 7.85, 7.89, 7.54
  • SAP NetWeaver ABAP Server and ABAP Platform,Versions -700, 701, 702, 731, 740, 750-757, 787, 789

Threat details

Introduction

SAP has released security updates to address vulnerabilities in multiple products. An attacker could exploit some of these vulnerabilities to take control of an affected system.

Remediation advice

Affected organisations are encouraged to review the SAP Security Notes for September 2022 and apply the necessary updates.

Last edited: 14 September 2022 3:14 pm