SAP Details

SAP

Walldorf, Germany • employees • Technology

Industry

Technology

Security Incidents

SAP SE is a German multinational software company based in Walldorf, Baden-Württemberg. It develops enterprise software to manage business operations and customer relations. The company is the world's leading enterprise resource planning software vendor.

Security Incidents

SAP Breach of May 2020

Severity Score

Low

Type

Zero-Day Exploit

Summary

In May 2020, SAP experienced a significant security breach involving a sophisticated threat actor exploiting vulnerabilities in its software. The breach was primarily linked to unpatched systems running older versions of SAP software, which allowed the attackers to gain unauthorized access. Approximately 50,000 companies using SAP's enterprise resource planning (ERP) systems were potentially affected, exposing sensitive business data. The vulnerabilities exploited were part of a set known as "10KBLAZE," which had been publicly disclosed by security researchers earlier in the year. SAP promptly...
Show more

Severity

The SAP cyber security incident in May 2020 involved cybercriminals actively exploiting known SAP security vulnerabilities, leading to a high success rate of over 300 exploits for every 1,500 cyber attacks recorded. The vulnerabilities allowed hackers to take complete control of SAP systems, posing a significant threat to organizations using SAP software.

Impact

The impact of the breach was widespread, potentially affecting thousands of organizations using SAP systems. The breach could have resulted in unauthorized access and control over sensitive data stored in SAP systems, leading to data breaches, financial losses, and reputational damage for the affected organizations.