security —

SAP patches four CVSS 10.0 flaws, two enable remote code execution

As part of SAP's routine monthly Security Patch Day, the vendor has addressed four vulnerabilities, each assigned the highest possible CVSS score of 10.0.

SAP patches four CVSS 10.0 flaws, two enable remote code execution

These issues permit exploitation by malicious actors even without prior authentication. The security updates cover three weaknesses residing within the SAP NetWeaver application server, which serves as the underlying software environment for SAP systems. Additionally, one vulnerability exists within the Web Dispatcher component, the gateway responsible for accepting external internet requests and forwarding them to the aforementioned server.

These critical patches highlight the persistent threat landscape facing enterprise infrastructure, where unauthenticated access vectors represent a significant operational risk for platform stability. Market participants and institutions must prioritize the deployment of these fixes to mitigate exposure.

Why it matters

These critical vulnerabilities represent severe risks to infrastructure relying on SAP platforms. Operators must prioritize applying these patches immediately to prevent unauthorized remote access and system compromise.

Earlier coverage

Reported by thehackernews.com.

security

Related coverage

Elsewhere in this edition