2018 SAP SECURITY NOTES

Every month Onapsis publishes an analysis of released SAP Security Notes.

Below, we have put together a list outlining the most newsworthy SAP Security items from 2018

1000

750
HISTORIC OVERVIEW

274 SAP Security Notes

500

215 SAP Security Notes

250
2018 has the lowest
number of SAP security
notes released since 2009
0
01

02

03

04

05

06

07

08

09

10

11

12

13

14

15

16

17

18
20

20

20

20

20

20

20

20

20

20

20

20

20

20

20

20

20

20
7
Onapsis founders were
the first to present on Onapsis is founded
309 Average SAP Security Notes per year 38 5
SAP security at Black Hat 43

208
153

21 14

2017 2018

2017 vs 2018 by Priority

5 HOT

43
VULNERABILITY TYPES HIGH

SAP NOTES PRIORITY

18% Missing Authority Check
13% Cross-Site Scripting (XSS) 153
MEDIUM

12% Information Disclosure

7% Denial Of Service 14 LOW

2018

37 19 20%
vulnerabilities reported SAP Security Notes of ‘Hot News’ SAP Notes were
by Onapsis were patched group this bugs reported by Onapsis Research Labs
in 2018.

www.onapsis.com
www.facebook.com/onapsis
@onapsis