Update 1 to Security Note 1985340, SAP security note 2189127

SAP Note 2189127

SAP security note 2189127, “Update 1 to Security Note 1985340”. Below are the symptom, SAP recommended solution and the affected software components.

Description

Symptom

Security Note 1985340 has been re-released due to missing validity entries. Newly added releases that are affected are listed in the Patch-Level Section.

Solution

Apply the patches from the Patch Section.

Reason and prerequisites

The validity of Security Note 1985340 has been extended with additional affected releases.

Affected components

Basis Components > NetWeaver Application Server Java > Local Admin Tools > Administration
LMNWABASICAPPS (7.11 – 7.40)

Full note on SAP: SAP Support Launchpad note 2189127

Detailed exploitation and proof-of-concept material for this note is maintained in the RedRays Security Platform. For access, contact [email protected].

#Potential information disclosure relating to NW AS Java #update #update note

Explore More

SAP Integration Suite and CAP Security Scan | RedRays

July 23, 2026

Product update Clean core is doing its job: custom logic keeps moving off the ABAP stack. But it does not disappear, it

SAP Security Patch Day July 2026 | RedRays

July 14, 2026

SAP has released its July 2026 security patch package containing 19 security notes addressing vulnerabilities across enterprise SAP environments. This release is

SAP Note 3704740: Missing Authorization Check (CVE-2026-27688)

July 6, 2026

SAP Security Note – Deep Dive SAP Note 3704740 closes a missing authorization check in SAP NetWeaver Application Server for ABAP that

SAP Note 3703856: Missing Authorization Check (CVE-2026-24309)

July 6, 2026

SAP Security Note – Patch Advisory SAP Note 3703856 fixes a missing authorization check in the SAP NetWeaver Application Server for ABAP.