notification and subscription for security notes

[SAPSupport]

hello,

we would like to know if there is any possibilities or workaround for us to subscribe and get notified on vulnerabilities detected by SAP?

for example in [CVE-XXX-XXX] Authentication bypass via authorization code injection in SAP Approuter  is a vulnerable that is critical for us BTP users and how can we get notified of such vulnerability instead of manually review each security notes?

------------------------------------------------------------------------------------------------------------------------------------------------
Learn more about the SAP Support user and program here.

[SAPSupport · Accepted solution]

To receive notifications for security notes, please refer to the KBA below: 

2478289 - How to set up notifications for new or updated SAP Notes and/or KBAs with Expert Search fi...
If you wish to receive notifications about security notes that pertain to the Priority as "Correction with high priority" under the component indicated in 3567974, then you can set a filter as shown below.

Components (Exact) :BC-XS-APR 
Priority: Correction with high priority
Document Type: SAP Security Notes

If you have any questions or need further assistance, please feel free to contact us. 

BR 
Judy