Emergency patch for potential SAP zero-day that could grant full system control

SAP's latest out-of-band patch is for a perfect 10/10 bug in NetWeaver that experts suspect could have already been exploited as a zero-day. However, we can't say for sure whether that's the case because the German software shop has restricted access to the details behind a customer paywall. The vulnerability's CVE identifier …

[rwbthatisme]

M&S Use SAP?

[sitta_europea]

"...With the evolution towards an omni-channel and personalised customer experience, a more effective digital and technology infrastructure is a critical enabling step and progress to date has been slower than planned. With new leadership soon to be in place, we expect to accelerate change and increase investment in core technology infrastructure, including an upgrade in SAP starting this year...."

[https://corporate.marksandspencer.com/media/press-releases/marks-and-spencer-group-plc-full-year-results-52-weeks-ended-30-march-2024]