Update 1 to Security Note 1562697, SAP security note 2205521

SAP Note 2205521
SAP Security Note
High priority

SAP security note 2205521, "Update 1 to Security Note 1562697", released on 16.09.2015. Below are the symptom and SAP recommended solution.

ComponentBasis Components > Middleware > RFC

PriorityCorrection with high priority

TypeSAP Security Note

Version2

StatusReleased for Customer

Released on16.09.2015

Description

Symptom

Security note 1562697 has been rereleased due to missing Support Package entries. The following Support Package entries have been added:

SAP BASIS 701 SP 18
SAP BASIS 702 SP 18
SAP BASIS 730 SP 14

Solution

Apply corrections from security note 1562697.

Reason and prerequisites

Support Package entries are missing in security note 1562697.

Full note on SAP: SAP Support Launchpad note 2205521

Detailed exploitation and proof-of-concept material for this note is maintained in the RedRays Security Platform. For access, contact [email protected].

#RFC #Middleware #Support Package #SAP BASIS

Explore More

CVE-2026-58240 security alert cover, CVSS base score 9.8 critical, SAP message server missing authentication

SAP Note 3759472: SAP Message Server Authentication Gap (CVE-2026-58240)

September 8, 2026

SAP Note 3759472 CVE-2026-58240 SAP Message Server Patch Day September 2026 SAP Security Note 3759472 | CVSS 3.0 base score 9.8 (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)

CVE-2026-44756 security alert cover, CVSS base score 10.0 critical, SAP Extended Passport stack overflow

SAP Note 3747649: SAP Extended Passport Overflow (CVE-2026-44756)

September 8, 2026

SAP Note 3747649 CVE-2026-44756 SAP NetWeaver Kernel Patch Day September 2026 SAP Security Note 3747649 | CVSS 3.0 base score 10.0 (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H)

SAP Security Patch Day September 2026 cover image from RedRays

SAP Security Patch Day September 2026 | RedRays

September 8, 2026

SAP Security Patch Day September 2026 brings 20 security notes, four of them HotNews rated up to CVSS 10.0, alongside five High

SAP Note 3765948 cover image, code injection and SSRF vulnerability analysis of CVE-2026-44772 in SAP MII

SAP Note 3765948: Code Injection via SSRF in SAP MII (CVE-2026-44772)

August 11, 2026

CVE-2026-44772, CVSS 9.9: XSL transform parameters let an authenticated user make SAP MII fetch and execute a remote stylesheet. The gate ships disabled.