# 🚨 Latest SAP Security Updates – November 2023: What You Need to Know

> In November 2023, SAP released six new and updated security notes, including two HotNews notes and four rated medium priority. Here are the…

- Source: https://snok.ai/en/news/blog/sap-security-updates-november-2023/
- Author: Jacek Bugajski
- Published: 2023-11-14

---
In November 2023, [SAP](https://snok.ai/en/news/blog/prepare-sap-s4hana-conversion-rise/) released six new and updated security notes, including two HotNews notes and four rated medium priority. Here are the key points worth noting:

1. Critical update for CommonCryptoLib: SAP Security Note #3340576, rated 9.8 on the CVSS scale, addresses a critical missing authorisation check in SAP CommonCryptoLib. This vulnerability could lead to a complete compromise of the affected application. The update to this note contains minor textual changes that are important for [SAP HANA](https://snok.ai/en/news/blog/sap-hana-2-0-sps-08-changes/) Database 2.0 customers.

2. New threats for SAP Business One: A new HotNews note, SAP Security Note #3355658 with a CVSS score of 9.6, addresses improper access control during the installation of SAP Business One.

🔍 Summary and actions: Although November's [SAP Security Patch Day](https://snok.ai/en/news/blog/sap-security-patch-day-september-2024/) was relatively quiet, the updates - particularly those relating to SAP CommonCryptoLib and Business One - require a prompt response and remediation.

💬 Worth discussing: What has been your experience deploying these security updates? Are your SAP systems already protected against these newly discovered vulnerabilities?