SAP’s April 2025 Security Patch: Critical Flaws Unveiled – Patch Now or Hackers Will Party!
SAP announced 18 new and two updated security notes during its April 2025 Security Patch Day. Highlights include three critical vulnerabilities, two of which are code injection bugs in S/4HANA and Landscape Transformation. The third is an authentication bypass in Financial Consolidation. Organizations should apply these SAP patches promptly to stay secure.
Hot Take:
In a cybersecurity world where every day feels like April Fool’s day, SAP has dropped its own gag-filled basket of vulnerabilities for 2025 Security Patch Day. With more bugs than a picnic, they’re serving up critical flaws with a side of “Please patch me now!” sauce. Let’s just say, if SAP were a ship, it would be looking like quite the Swiss cheese right now.
Key Points:
- SAP released 18 new and two updated security notes as part of April 2025 Security Patch Day.
- Three critical-severity vulnerabilities were addressed, including two code injection bugs and one authentication bypass issue.
- The code injection vulnerabilities are tracked as CVE-2025-27429 and CVE-2025-31330 with a CVSS score of 9.9.
- The authentication bypass vulnerability is tracked as CVE-2025-30016 with a CVSS score of 9.8.
- Additional patches were released for high, medium, and low-severity vulnerabilities across various SAP products.
Already a member? Log in here