Skip to content
SecondTuesday

SAP Business Warehouse

4 notes since January 2023.

Priority is derived from CVSS, not SAP’s priority: CVSS 9.0 or higher is Critical, 7.0 or higher High, 4.0 or higher Medium, below 4.0 Low. SAP’s own priority is only on SAP for Me (SAP login required).

Patch DayNoteTitlePriority (derived from CVSS, not SAP’s priority)CVSS
March 20263703385Missing Authorization check in SAP Business Warehouse (Service API) Medium5.9
July 20253604212Cross-Site Scripting (XSS) vulnerability in SAP Business Warehouse (Business Explorer Web 3.5 loading animation) Medium6.1
March 20253552144Missing Authorization Check in SAP Business Warehouse (Process Chains) Medium5.7
September 20243481992Information Disclosure vulnerability in the SAP Business Warehouse (BEx Analyzer) Medium4.3