SAP shouldn't require
a consultant to survive.

Memory Corruption via Malformed Extended Passport Header

Missing boundary validation during deserialization of Extended Passport (EPP) data. A crafted network packet with a malformed EPP header triggers a memory safety violation. No authentication required, low attack complexity, network reachable.

Missing Authentication for Message Server Internal Registration

Insufficient validation of authenticity of application server components during internal registration. An unauthenticated remote attacker could register a rogue application server into the SAP system group, enabling traffic interception and potential remote code execution.

Credential Exposure in CAP Multitenant Extension Library

Sensitive service binding credentials exposed via specially crafted requests in multitenant CAP applications using the cds-mtxs library. SAP BTP Cloud Foundry has blocked affected endpoints at the platform level, but customers must update the library and redeploy their applications.