
SAP patches CVSS 10.0 PROXYGATE and ICM2SHELL flaws
Onapsis found no exploitation; network attackers can run commands as the SAP installation owner, <sid>adm.
1
3 stories, newest first · one card per story

Onapsis found no exploitation; network attackers can run commands as the SAP installation owner, <sid>adm.

The bulletin lists 35 new notes and does not report active exploitation of the patched issues.

Unauthenticated memory corruption in ICM and Web Dispatcher may allow code execution; exploitation is not discussed.
Today 230 readers · 236 views · 55 reads · all time 187K views