Question Re: notification and subscription for security notes in Technology Q&A

notification and subscription for security notes

SAPSupport — Wed, 12 Mar 2025 10:23:59 GMT

hello,

we would like to know if there is any possibilities or workaround for us to subscribe and get notified on vulnerabilities detected by SAP?

for example in [CVE-XXX-XXX] Authentication bypass via authorization code injection in SAP Approuter is a vulnerable that is critical for us BTP users and how can we get notified of such vulnerability instead of manually review each security notes?

------------------------------------------------------------------------------------------------------------------------------------------------
Learn more about the SAP Support user and program here.

Re: notification and subscription for security notes

SAPSupport — Wed, 12 Mar 2025 10:24:07 GMT

To receive notifications for security notes, please refer to the KBA below:

2478289 - How to set up notifications for new or updated SAP Notes and/or KBAs with Expert Search filters - SAP for Me
If you wish to receive notifications about security notes that pertain to the Priority as "Correction with high priority" under the component indicated in 3567974, then you can set a filter as shown below.

Components (Exact) :BC-XS-APR
Priority: Correction with high priority
Document Type: SAP Security Notes

If you have any questions or need further assistance, please feel free to contact us.

BR
Judy