Co-founder and CTO of RedRays
A malicious user can trigger functionality in DocumentBuilder without authentication and authorization.
Score: 0
Detailed vulnerability information added to RedRays Security Platform. Contact [email protected] for details.
https://launchpad.support.sap.com/#/notes/1507377
Critical Component: Deploy Web Service (NetWeaver AS Java) Recommendation: Immediate patching required The vulnerability allows an authenticated low-privileged user to upload and
SAP has released its September 2025 security patch package containing 26 security notes addressing critical vulnerabilities across enterprise SAP environments. This release
SAP has released its August 2025 security patch package containing 19 security notes addressing critical vulnerabilities across enterprise SAP environments. This release
The moment a company decides to run its finance, logistics or human-resources data on SAP, it gains a powerhouse of efficiency –