The Hacker News

SAP Discloses Critical CVSS 10 Flaw in Cloud SDK for Python Allowing OAuth2 Credential Theft

Six SAP Cloud SDK for Python releases skip tenant checks in Destination calls, enabling OAuth2 client secret leaks if attackers control tenant names.
Computing

SAP patches critical Python SDK flaw that could expose OAuth credentials

SAP has patched a maximum-severity flaw in its Cloud SDK for Python that could expose OAuth credentials in multi-tenant BTP applications, alongside 19 other vulnerabilities in its October security ...
techtarget

ABAP (Advanced Business Application Programming)

ABAP (Advanced Business Application Programming) is the primary programming language supported on the SAP NetWeaver ABAP application server platform and applications that run on it, such as SAP ERP ...
techtarget

What is SAP BAPI (Business Application Programming Interface)?

SAP BAPI (Business Application Programming Interface) is a special type of application programming interface (API) that allows third-party software applications to interact with SAP systems. Instead ...

SAP BTP Also Had a CVSS 10.0 Vulnerability—The Misconception That "SAP Protects Us Because It's the Cloud"

On October 21, 2026, a critical vulnerability was discovered in PHP, and an emergency security update was released.These are ...

SAP BTPにもCVSS 10.0の脆弱性があった――「クラウドだからSAPが守ってくれる」という誤解

2026年10月21日、PHPに重大な脆弱性が発見され、緊急のセキュリティ更新が公開された。 CVE-2026-109618とCVE-2026-109619である。いずれもCVSS ...