SAP Security Patch Day 2024
SAP Security Patch Day 2024: 12 Patch Days, 124 SAP security notes, 5 Critical. Monthly counts, highest CVSS and CISA KEV status.
Priority is derived from CVSS, not SAP’s priority: CVSS 9.0 or higher is Critical, 7.0 or higher High, 4.0 or higher Medium, below 4.0 Low. SAP’s own priority is only on SAP for Me (SAP login required). Coverage: this site is built from SAP’s CVE records, so notes without a CVE, notes with only third-party CVEs (for example Apache or OpenSSL), and updates to earlier notes are not covered. That is about 7% of new notes.
| Patch Day | SAP notes | GitHub advisories | Critical | High | Highest CVSS | KEV |
|---|---|---|---|---|---|---|
| December 2024December 10, 2024 | 9 | 0 | 1 | 2 | 9.1 | 0 |
| November 2024November 12, 2024 | 8 | 0 | 0 | 1 | 8.8 | 0 |
| October 2024October 8, 2024 | 5 | 0 | 0 | 1 | 7.7 | 0 |
| September 2024September 10, 2024 | 15 | 0 | 0 | 0 | 6.5 | 0 |
| August 2024August 13, 2024 | 14 | 0 | 1 | 2 | 9.8 | 0 |
| July 2024July 9, 2024 | 14 | 0 | 0 | 2 | 7.7 | 0 |
| June 2024June 11, 2024 | 10 | 0 | 0 | 2 | 8.1 | 0 |
| May 2024May 14, 2024 | 12 | 0 | 1 | 1 | 9.6 | 0 |
| April 2024April 9, 2024 | 10 | 0 | 0 | 3 | 8.8 | 0 |
| March 2024March 12, 2024 | 7 | 0 | 1 | 0 | 9.1 | 0 |
| February 2024February 13, 2024 | 13 | 0 | 1 | 4 | 9.1 | 0 |
| January 2024January 9, 2024 | 7 | 0 | 0 | 3 | 8.4 | 0 |