SAP’s Patch Day Pile-Up: Critical Bugs, Hot Fixes, and a Dash of SQL Drama!
SAP’s January 2025 Patch Day unveiled 14 new security notes, including two critical ones in NetWeaver with a CVSS score of 9.9. These vulnerabilities could allow attackers to steal credentials and access sensitive information. Organizations are urged to review the security notes and apply patches swiftly to safeguard their systems.

Hot Take:
In the ever-thrilling world of cybersecurity, SAP’s January 2025 Patch Day comes in like a superhero with 14 capes, ready to save the day from villains with names like CVE-2025-0070. Who knew patch notes could have more drama and suspense than a soap opera? Move over, daytime TV; SAP’s security saga is here to steal the spotlight!
Key Points:
- SAP released 14 new security notes on January 2025 Patch Day.
- Two critical vulnerabilities with a CVSS score of 9.9 were addressed.
- The vulnerabilities could potentially allow credential theft and information disclosure.
- SAP also tackled a high-severity SQL injection vulnerability.
- No vulnerabilities reported as being exploited in the wild yet.
Already a member? Log in here