SAP has released new security updates to fix several serious vulnerabilities affecting its enterprise software products. As part of its latest Security Patch Day, the company addressed 16 security issues, including three critical vulnerabilities in SAP NetWeaver, SAP Commerce Cloud, and SAP AppRouter. These flaws could expose organizations to serious security risks if they are not fixed quickly.
One of the most severe vulnerabilities affects SAP NetWeaver Application Server ABAP. Security experts found that the flaw could allow an unauthenticated attacker to send specially crafted Remote Function Call (RFC) requests, leading to memory corruption. If successfully exploited, attackers could gain complete control over the affected SAP system without needing valid login credentials.
Another critical issue impacts SAP Commerce Cloud and SAP Data Hub. The vulnerability is linked to Spring Security and could allow attackers to gain unauthorized access to affected systems. Since Commerce Cloud is widely used by businesses to manage online stores and customer data, successful exploitation could expose sensitive business information and disrupt normal operations.
SAP also fixed a critical vulnerability in SAP AppRouter. The company explained that the flaw could allow attackers to bypass important security protections under certain conditions. If exploited, it could weaken access controls and increase the chances of unauthorized activity inside enterprise environments that rely on AppRouter for secure communication between applications.
Along with the critical flaws, SAP resolved several high and medium severity vulnerabilities across multiple products. These security issues included risks such as information disclosure, privilege escalation, denial-of-service attacks, and other weaknesses that could impact the confidentiality, integrity, or availability of enterprise systems if left unpatched.
Enterprise software like SAP is commonly used to manage financial records, human resources, supply chains, manufacturing, and customer operations. Because these systems often store highly sensitive business data, attackers actively search for weaknesses that could help them steal information, disrupt services, or gain long-term access to corporate networks.
SAP strongly recommends that customers review the latest security notes and install all available patches as soon as possible. Organizations should also verify that their SAP systems are running supported software versions, monitor their environments for suspicious activity, and follow security best practices to reduce the risk of exploitation before attackers can take advantage of these vulnerabilities.
Security researchers continue to warn that critical vulnerabilities in widely deployed enterprise software are often targeted soon after public disclosure. Prompt patch management remains one of the most effective ways to protect business systems from cyberattacks. Companies using SAP NetWeaver, Commerce Cloud, AppRouter, or other affected products should treat these updates as a high priority to maintain the security and stability of their environments.
Stay alert, and keep your security measures updated!
Source: Follow cybersecurity88 on X and LinkedIn for the latest cybersecurity news
