SAP Business Connector
6 notes since January 2023.
Priority is derived from CVSS, not SAP’s priority: CVSS 9.0 or higher is Critical, 7.0 or higher High, 4.0 or higher Medium, below 4.0 Low. SAP’s own priority is only on SAP for Me (SAP login required).
| Patch Day | Note | Title | Priority (derived from CVSS, not SAP’s priority) | CVSS |
|---|---|---|---|---|
| January 2026 | 3666061 | Cross-Site Scripting (XSS) vulnerability in SAP Business Connector | Medium | 6.1 |
| November 2025 | 3665900 | OS Command Injection vulnerability in SAP Business Connector | Medium | 6.8 |
| November 2025 | 3666038 | Path Traversal vulnerability in SAP Business Connector | Medium | 6.8 |
| November 2025 | 3662000 | Open Redirect vulnerability in SAP Business Connector | Medium | 6.1 |
| November 2025 | 3665907 | Reflected Cross-Site Scripting (XSS) vulnerability in SAP Business Connector | Medium | 6.1 |
| April 2024 | 3421453 | Cross-Site Scripting (XSS) vulnerability in SAP Business Connector | Medium | 4.8 |