C21/100
Vulnerability · critical
SAP patches critical ICM2SHELL and ProxyGate vulnerabilities in 42 advisories
Tier C · Keep an eye on it – Check if you’re affected
Who’s exposed: SAP customers running affected products named in the advisories
Tier C because: Hits tech teams
Reach
Attack
Damage
Fix
Popular tool
What to do
- Review the SAP security advisories and apply the patches that affect your installed products.
The Brief
- SAP has published 42 new and updated security advisories.
- Nine of the advisories address critical-severity vulnerabilities.
- The patches cover the ICM2SHELL and ProxyGate vulnerabilities named in the headline.
Why it matters
Critical flaws in SAP products can expose business systems, so administrators and developers running SAP software should check whether their installations are affected by the updated advisories.
The checklist behind the tier
Checklist · 2 of 10 yes
| Yes | Hits tech teams | Judgment: SAP enterprise software is run and maintained by IT and ops teams. |
| No | Core infrastructure | Judgment: SAP products are enterprise platforms, not shared core infrastructure like OpenSSH or the Linux kernel. |
| Yes | Popular tool | Judgment: SAP NetWeaver-based systems are widely deployed by large enterprises. |
| No | Exploited in the wild | SecurityWeek: reports only the patches and advisories; no observed attacks mentioned. |
| No | Public exploit | SecurityWeek: reports only that advisories were published; no exploit code mentioned. |
| No | Remote, no login | SecurityWeek: does not state whether exploitation requires authentication or network access. |
| No | Full takeover | SecurityWeek: does not describe code execution or privilege escalation impact. |
| No | Secrets exposed | SecurityWeek: reports no data theft or exposure. |
| No | Supply chain | SecurityWeek: describes vulnerability patches, not compromised packages or updates. |
| No | No fix yet | SecurityWeek: SAP has published patches in 42 advisories, so fixes are available. |
Timeline
SAP publishes 42 new and updated security advisories, nine rated critical
SecurityWeek
SAP Patches Critical ICM2SHELL, ProxyGate Vulnerabilities
Source
SAP Patches Critical ICM2SHELL, ProxyGate Vulnerabilities ↗ SecurityWeek · 1h ago
First seen · 1 source · Full story page · How tiers are decided