Skip to content

🚨 Latest SAP Security Updates – November 2023: What You Need to Know

In November 2023, SAP released six new and updated security notes, including two HotNews notes and four rated medium priority. Here are the key points worth noting: 1. Critical update for CommonCryptoLib: SAP Security Note #3340576,...

Jacek Bugajski Jacek Bugajski ·
LinkedIn X

In November 2023, SAP released six new and updated security notes, including two HotNews notes and four rated medium priority. Here are the key points worth noting:

  1. Critical update for CommonCryptoLib: SAP Security Note #3340576, rated 9.8 on the CVSS scale, addresses a critical missing authorisation check in SAP CommonCryptoLib. This vulnerability could lead to a complete compromise of the affected application. The update to this note contains minor textual changes that are important for SAP HANA Database 2.0 customers.

  2. New threats for SAP Business One: A new HotNews note, SAP Security Note #3355658 with a CVSS score of 9.6, addresses improper access control during the installation of SAP Business One.

🔍 Summary and actions: Although November’s SAP Security Patch Day was relatively quiet, the updates - particularly those relating to SAP CommonCryptoLib and Business One - require a prompt response and remediation.

💬 Worth discussing: What has been your experience deploying these security updates? Are your SAP systems already protected against these newly discovered vulnerabilities?

Tematy: Other sap-security SAP S/4HANA SAP HANA

More from this series

Other

Weekly review: AI enters a phase of maturity - architecture, brakes and the first bills

The week AI got architecture, brakes and its first bills. SAP opens up a modular AI architecture with Claude as a component, UiPath adds Guardrails and case management, and the market starts talking about FinOps for AI and new attack vectors against agents that can see the screen.

NIS2 Autopilot: agent compliance under human oversight, powered by SecurityBridge

The NIS2 clock starts the moment an incident occurs: 24 hours for an early warning to the CSIRT, 72 hours for the full notification. The board is personally liable. NIS2 Autopilot combines SecurityBridge detection with an AI agent that triages the incident and drafts the report - while a human approves before anything leaves the organisation.

Claude Code + UiPath via MCP: a complete setup for an enterprise team

Step by step: installing Claude Code on macOS, Windows and Linux, configuring the UiPath CLI, and connecting UiPath via the Model Context Protocol. With example commands and the QA rules we use at SNOK.

Get in touch

Get in touch Email office@snok.ai