Protected: SAP Patch Day // August 2024 // Private Analysis

Explore More

SAP TechEd Berlin 2026, session CT1222: Rethinking security for modern SAP solution landscapes

SAP TechEd Berlin 2026: Standing Watch and the SAP Security Practitioners Taskforce

October 26, 2026

On October 28 at SAP TechEd Berlin 2026, RedRays presents “Standing watch”, a Community Theater session on keeping modern SAP landscapes secure, continuously and end to end. Plus: join the new independent SAP Security Practitioners Taskforce.

SAP Note 3629325: October XSS Revision (CVE-2025-42938)

October 13, 2026

SAP revises CVE-2025-42938 in Note 3629325 version 13. Updated applicability, correction instructions and the S4CEXT manual step require reassessment.

SAP Note 3779985: Enterprise Portal Reflected XSS (CVE-2026-89117)

October 13, 2026

CVE-2026-89117 is reflected XSS in SAP Enterprise Portal. The fix is in EP-ADMIN 7.50, with different patch levels from October’s EP-RUNTIME fixes.

SAP Note 3789825: Enterprise Portal Information Disclosure (CVE-2026-89118)

October 13, 2026

CVE-2026-89118 exposes restricted SAP Enterprise Portal information anonymously. EP-RUNTIME fixes and verification without an authenticated session.