Update 1 to security note 1610237, SAP security note 1772647

SAP Note 1772647

SAP security note 1772647, "Update 1 to security note 1610237". Below are SAP recommended solution and the affected software components.

Description

Solution

No steps to apply from the customer side.

CVSS

Score 0

References

SAP Note 1610237 – Unauthorized modification of displayed content in BW-CRM

Affected components

SAP Business Warehouse > Planning > Business Planning and Simulation (BW-PLA-BPS)

Full note on SAP: SAP Support Launchpad note 1772647

Detailed exploitation and proof-of-concept material for this note is maintained in the RedRays Security Platform. For access, contact [email protected].

#BW-PLA-BPS #Business Planning and Simulation #SAP BW

Explore More

CVE-2026-58240 security alert cover, CVSS base score 9.8 critical, SAP message server missing authentication

SAP Note 3759472: SAP Message Server Authentication Gap (CVE-2026-58240)

September 8, 2026

SAP Note 3759472 CVE-2026-58240 SAP Message Server Patch Day September 2026 SAP Security Note 3759472 | CVSS 3.0 base score 9.8 (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)

CVE-2026-44756 security alert cover, CVSS base score 10.0 critical, SAP Extended Passport stack overflow

SAP Note 3747649: SAP Extended Passport Overflow (CVE-2026-44756)

September 8, 2026

SAP Note 3747649 CVE-2026-44756 SAP NetWeaver Kernel Patch Day September 2026 SAP Security Note 3747649 | CVSS 3.0 base score 10.0 (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H)

SAP Security Patch Day September 2026 cover image from RedRays

SAP Security Patch Day September 2026 | RedRays

September 8, 2026

SAP Security Patch Day September 2026 brings 20 security notes, four of them HotNews rated up to CVSS 10.0, alongside five High

SAP Note 3765948 cover image, code injection and SSRF vulnerability analysis of CVE-2026-44772 in SAP MII

SAP Note 3765948: Code Injection via SSRF in SAP MII (CVE-2026-44772)

August 11, 2026

CVE-2026-44772, CVSS 9.9: XSL transform parameters let an authenticated user make SAP MII fetch and execute a remote stylesheet. The gate ships disabled.