Important: Red Hat Security Advisory: pam security update

An update for pam is now available for Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions and Red Hat Enterprise Linux 8.8 Telecommunications Update Service. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System...

Important: Red Hat Security Advisory: aide security update

An update for aide is now available for Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...

The vulnerability of the administrative module for managing the SAP NetWeaver Enterprise Portal Administration, related to deficiencies in deserialization mechanisms, allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the administrative module for managing the SAP NetWeaver Enterprise Portal Administration is related to deficiencies in the deserialization mechanism. Exploiting this vulnerability allows an attacker to compromise the confidentiality, integrity, and accessibility of the...

The vulnerability of SAP NetWeaver Application Server Java, related to insufficient verification of communication source, allows attackers to disclose protected information.

The vulnerability of SAP NetWeaver Application Server Java is related to insufficient checks on the source of the communication channel. Exploiting this vulnerability can allow a malicious actor to disclose sensitive information...

The vulnerability of SAP NetWeaver ABAP Server and ABAP Platform software integration platforms, related to the use of single-factor authentication, allows attackers to completely compromise the system.

The vulnerability of SAP NetWeaver ABAP Server and ABAP Platform integration platforms is related to the use of single-factor authentication. Exploiting this vulnerability allows a malicious actor to completely compromise the system from a remote location...

The vulnerability of SAP NetWeaver and ABAP Platform software integration platforms, related to the absence of authentication, allows attackers to compromise the confidentiality of protected information.

The vulnerability of SAP NetWeaver and ABAP Platform software integration platforms is related to the absence of authentication. Exploiting this vulnerability allows a malicious actor to remotely compromise the confidentiality of protected information...

The vulnerability of the content-sharing framework between corporate portals in the SAP NetWeaver Enterprise Portal and Federated Portal Network is related to deficiencies in the deserialization mechanism. This vulnerability allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the content-sharing framework between corporate portals of SAP NetWeaver Enterprise Portal and Federated Portal Network is related to deficiencies in the deserialization mechanism. Exploiting this vulnerability allows an attacker to compromise the confidentiality, integrity,...

The vulnerability of the SAP Business Warehouse data management and analytics system, related to the lack of authentication, allows attackers to compromise the integrity of the protected information.

The vulnerability of the SAP Business Warehouse data management and analytics system is related to the absence of authentication. Exploiting this vulnerability allows a malicious actor to remotely compromise the integrity of the protected information...

The vulnerability of the SLD component of the SAP Business One resource management system allows a perpetrator to influence the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the SLD component in the SAP Business One resource management system is related to deficiencies in the authorization process. Exploiting this vulnerability could allow a malicious actor to influence the confidentiality, integrity, and accessibility of the protected informatio...

The vulnerability of the functional module of the RFC interface of the software tool for managing changes and migrations in SAP Landscape Transformation (SLT) allows a attacker to influence the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the functional module of the RFC interface of the software tool for managing changes and migrations in SAP Landscape Transformation SLT is related to improper code generation. Exploiting this vulnerability can allow an attacker to influence the confidentiality, integrity, and...

The vulnerabilities in the software for developing and executing applications in the ABAP language of SAP NetWeaver Application Server ABAP (BIC Document) allow attackers to carry out cross-site scripting attacks and gain unauthorized access to protected information.

The vulnerability of the software used for developing and executing applications in the ABAP language of SAP NetWeaver Application Server ABAP BIC Document is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to perform...

The vulnerability of the SAP Business One resource management system lies in the lack of a mechanism for verifying the source of access rights, allowing unauthorized users to gain unauthorized access to protected information.

The vulnerability of the SAP Business One resource management system is related to the lack of a mechanism for verifying the source of information. Exploiting this vulnerability can allow an attacker operating remotely to gain unauthorized access to protected information...

The vulnerability of the SAP Business Objects Business Intelligence Platform, related to insufficient validation of queries on the server side, allows a attacker to execute an SSRF attack.

The vulnerability of the SAP Business Objects Business Intelligence Platform relates to insufficient validation of queries at the server side. Exploiting this vulnerability can allow a malicious actor to execute an SSRF attack remotely...

The Bug Report – August 2025 Edition

The Bug Report – August 2025 Edition By Jonathan Omakun, Tola Olawale · August 27, 2025 Why am I here? Welcome back to The Bug Report! Did you miss us? The Trellix Advanced Research Center has been playing a high-stakes game of whack-a-mole with this month's vulnerabilities. We've dug through all...

Important: Red Hat Security Advisory: kpatch-patch-5_14_0-284_104_1, kpatch-patch-5_14_0-284_117_1, kpatch-patch-5_14_0-284_52_1, kpatch-patch-5_14_0-284_79_1, and kpatch-patch-5_14_0-284_92_1 security update

An update for multiple packages is now available for Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity...

Moderate: Red Hat Security Advisory: gdk-pixbuf2 security update

An update for gdk-pixbuf2 is now available for Red Hat Enterprise Linux 9.0 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...

Important: Red Hat Security Advisory: kernel security update

An update for kernel is now available for Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions and Red Hat Enterprise Linux 8.8 Telecommunications Update Service. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring Syst...

Important: Red Hat Security Advisory: webkit2gtk3 security update

An update for webkit2gtk3 is now available for Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...

Important: Red Hat Security Advisory: kernel security update

An update for kernel is now available for Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions and Red Hat Enterprise Linux 8.8 Telecommunications Update Service. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring Syst...

Important: Red Hat Security Advisory: tomcat security update

An update for tomcat is now available for Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions and Red Hat Enterprise Linux 8.8 Telecommunications Update Service. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring Syst...