Sélection de la langue

Government of Canada / Gouvernement du Canada

Bulletin de sécurité SAP – Correctif cumulatif mensuel de novembre 2026 (AV26-1137)

Numéro de série : AV26-1137
Date : 10 november 2026

En date du 10 novembre 2026, SAP_SE est touché par des vulnérabilités dans les produits suivants :

  • SAP NetWeaver AS ABAP (Internet Communication Manager)
    • Versions KRNL64UC 7.53, KERNEL 7.53, 7.54, 7.77, 7.93, 9.16, 9.18, 9.20
  • SAP Web Dispatcher
    • Versions HDB 2.00, KRNL64UC 7.53, WEBDISP 7.53, 7.54, 7.77, 7.93, 9.16, XS_ADVANCED_RUNTIME 1.00, SAP_EXTENDED_APP_SERVICES 1, KERNEL 7.53, 7.54, 7.77, 7.93, 9.16, 9.18, 9.20
  • SAP Gateway
    • Versions KRNL64NUC 7.22, 7.22EXT, KRNL64UC 7.22, 7.22EXT, 7.53, 8.04, KERNEL 7.22, 7.53, 7.54, 7.77, 7.93, 8.04, 9.16, 9.20, 9.21
  • SAP NetWeaver AS ABAP and ABAP Platform (SAML2 Service Provider)
    • Multiples versions
  • SAP NetWeaver Knowledge Management (XML Forms)
    • Version KMC-CM 7.50
  • SAP NetWeaver and ABAP Platform
    • Versions KRNL64NUC 7.22, 7.22EXT, KRNL64UC 7.22, 7.22EXT, 7.53, KERNEL 7.22, 7.53, 7.54, 7.77, 7.93, 9.16
  • S4CRM
    • Versions S4CRM 204, 205, 206, S4CEXT 107, 108, 109, BBPCRM 713, 714
  • SAP Web Dispatcher and Internet Communication Manager
    • Versions WEBDISP 7.93, 9.16, XS_ADVANCED_RUNTIME 1.00, KERNEL 7.93, 9.16, 9.20, 9.21
  • SAP BusinessObjects Business Intelligence Platform (Web Intelligence)
    • Versions ENTERPRISE 430, 2025, 2027
  • SAP NetWeaver and ABAP Platform
    • Versions KRNL64NUC 7.22, 7.22EXT, KRNL64UC 7.22, 7.22EXT, 7.53, 8.04, KERNEL 7.22, 7.53, 7.54, 7.77, 7.93, 8.04, 9.16, 9.18, 9.20
  • SAP NetWeaver (Internet Graphics Service)
    • Versions BC-FES-IGS 7.20EXT, 7.20_EX2, 7.53, 7.54, 7.81, 9.16
  • SAP Web Dispatcher
    • Versions KRNL64UC 7.53, WEBDISP 7.53, 7.54, 7.77, 7.93, 9.16, KERNEL 7.53, 7.54, 7.77, 7.93, 9.16, 9.20, 9.21
  • SAP Cloud SDK for Python
    • Versions 0.63.1, 0.50.0
  • SAP Cloud SDK for AI(JavaScript)
    • Version v2.17.0
  • SAP NetWeaver Application Server ABAP (Internet Communication Manager) and SAP Web Dispatcher
    • Versions WEBDISP 9.16, KERNEL 9.16, 9.20, 9.21
  • SAP NetWeaver Application Server (SAP Message Server)
    • Versions KRNL64NUC 7.22, 7.22EXT, KRNL64UC 7.22, 7.22EXT, 7.53, KERNEL 7.22, 7.53, 7.54, 7.77, 7.93, 9.16, 9.18, 9.20, 9.21
  • SAP NetWeaver (Internet Graphics Service)
    • Versions BC-FES-IGS 7.20EXT, 7.20_EXT2, 7.53, 7.54, 7.81, 9.16
  • SAP NetWeaver and ABAP Platform
    • Multiples versions
  • SAP NetWeaver (SAP Message Server)
    • Versions KRNL64UC 7.53, KERNEL 7.53, 7.54, 7.77, 7.93, 9.16, 9.20, 9.21
  • SAP NetWeaver AS Java EDM Application
    • Version CE-RA-EDM 7.50
  • SAP NetWeaver and ABAP Platform (SAP Message Server)
    • Versions KRNL64NUC 7.22, 7.22EXT, KRNL64UC 7.22, 7.22EXT, 7.53, 8.04, KERNEL 7.22, 7.53, 7.54, 7.77, 7.93, 8.04, 9.16, 9.18, 9.20, 9.21
  • SAP NetWeaver Application Server ABAP, ABAP Platform and SAP Web Dispatcher
    • Versions WEBDISP 7.77, 7.93, 9.16, XS_ADVANCED_RUNTIME 1.0, KERNEL 7.77, 7.93, 9.16
  • SAP Host Agent
    • Version SAPHOSTAGENT 7.22
  • SAP ABAP Developer Tools (AMDP Data Preview)
    • Multiples versions
  • SAP/astonish
    • Version v3.6.0

Le Centre pour la cybersécurité encourage les utilisateurs et les administrateurs à consulter le lien fourni et à installer les mises à jour nécessaires, dès qu'elles sont disponibles.

Date de modification :