The unrestricted file upload flaw is likely being exploited by an initial access broker to deploy JSP web shells that grant full access to servers and allow installing additional malware payloads.

SAP fixed CVE-2025-42999, a 9.1/10 vulnerability in NetWeaver This one was chained with CVE-2025-31324, which was fixed in April Fortune 500 companies are apparently at risk SAP has patched a critical ...

SAP has released fixes for 15 vulnerabilities as part of its June 2026 Security Patch package, including four critical-severity flaws affecting SAP NetWeaver and SAP Commerce Cloud. NetWeaver is SAP's ...

SAP has fixed two critical vulnerabilities affecting NetWeaver web application server that could be exploited to escalate privileges and access restricted information. As part of the January Security ...

SAPVista announced an expansion of its SAP server access portfolio with new environments for BTP, AI Core, and SAP Joule. The update adds SAP PEO, SAP IS OIL with S4HANA, and SAP ISU with S4HANA, ...

SAP SE SAP has announced the forthcoming release of “RISE with SAP on IBM Power Virtual Server.” This new hyperscaler solution offers IBM Power customers a streamlined and efficient pathway to ...