SAP patches four CVSS 10 flaws in NetWeaver, Gateway and Web Dispatcher
Onapsis names the memory-corruption bugs ICM2SHELL and the Gateway pre-auth issue PROXYGATE; attacks on these four are not reported.
Stories per day · 30 days
2 stories, newest first · one card per story
Stories tagged #icm2shell
SAP patches critical ICM2SHELL and ProxyGate kernel flaws
Onapsis gave SAP a working unauthenticated exploit for ICM2SHELL; the November notes also cover ProxyGate and a SAML impersonation bug.