Skip to content

Key Insights Blog

Read the latest insights from our experts on Cybersecurity and Risk management for SAP. 
hacking
SAP Vulnerability

Details about SAP vulnerability CVE-2022-22536 – Request smuggling

In SAP’s patch round of February 2022, an SAP Security Note was released with a CVSS score of 10/10 named, “Request smuggling and request concatenation in SAP NetWeaver, SAP Content Server and SAP Web Dispatcher”. This particular type of vulnerability is not common in SAP systems and therefore interesting to look at. As patching the SAP kernel executables is often not done promptly, we can expect this vulnerability present in the customer’s systems for quite some time.

Read More »
February 20, 2024 No Comments
code pc
SAP Cybersecurity

Hardening the ICM with ACLs – a practical example

In one of our recent articles, we pointed out the use of Access Control Lists (ACLs) to better manage access control. Below, we will show a practical example of how this can be done for inbound HTTP communication with the ‘Internet Communication Manager’ (ICM) component of an SAP system.

Read More »
February 15, 2024 No Comments
AI Security Hardening
SAP Vulnerability

Prerequisites for an AI-driven SAP Security – Part 2: System Hardening

While Patch Management helps you implement code fixes for known vulnerabilities in the system code, your SAP system still has a huge number of parameters and settings that influence the behavior of the application. Quite a few of them are security-related and have a significant impact on your attack surface.

It is key for the security of your business-critical SAP systems that you harden them.

Read More »
February 9, 2024 No Comments
PAM Platform
SAP Threat Monitoring

Integrating Privileged Access Management into the SecurityBridge SAP Platform

The inclusion of Privileged Access Management (PAM) in our platform marks a significant advancement for existing and future customers. Until now, our focus was primarily on monitoring and detection. With PAM, the platform extends its capabilities to grant, manage, and audit privileged access in SAP’s ABAP/4 based products. Looking ahead, we plan to expand this functionality to include JAVA-based SAP products too.

Read More »
February 6, 2024 No Comments