The Hacker News

SAP Discloses Critical CVSS 10 Flaw in Cloud SDK for Python Allowing OAuth2 Credential Theft

Six SAP Cloud SDK for Python releases skip tenant checks in Destination calls, enabling OAuth2 client secret leaks if ...
techtarget

ABAP (Advanced Business Application Programming)

ABAP (Advanced Business Application Programming) is the primary programming language supported on the SAP NetWeaver ABAP application server platform and applications that run on it, such as SAP ERP ...
techtarget

What is SAP BAPI (Business Application Programming Interface)?

SAP BAPI (Business Application Programming Interface) is a special type of application programming interface (API) that allows third-party software applications to interact with SAP systems. Instead ...

SAP BTP Also Had a CVSS 10.0 Vulnerability—The Misconception That "SAP Protects Us Because It's the Cloud"

On October 21, 2026, a critical vulnerability was discovered in PHP, and an emergency security update was released.These are ...
Forkast News

SAP Cloud SDK for Python Lets Attackers Steal OAuth2 Credentials Through a Tenant Subdomain Input — CVSS 10.0

The eleventh trust-through-defaults incident in 21 days hit SAP's enterprise SDK layer. A regression in six later releases shows how fragile the fix class really is.

SAP BTPにもCVSS 10.0の脆弱性があった――「クラウドだからSAPが守ってくれる」という誤解

2026年10月21日、PHPに重大な脆弱性が発見され、緊急のセキュリティ更新が公開された。 CVE-2026-109618とCVE-2026-109619である。いずれもCVSS ...