Security News

SAP Patches 12 SQL Injection, XSS Vulnerabilities in HANA (Threatpost)
2015-09-29 15:32

SAP patched a dozen holes in its in-memory management system HANA that could have led to SQL injections, cross-site scripting (XSS) errors, and memory corruption vulnerabilities.

Static Encryption Key Found in SAP HANA Database (Threatpost)
2015-06-19 13:00

Researchers from ERPScan said SAP’s HANA in-memory database contains a default static encryption key.

Static encryption keys affect SAP security (Help Net Security)
2015-06-19 06:57

Yesterday, Dmitry Chastukhin, Director of Professional Services at ERPScan, presented a report on the latest SAP security trends at the Black Hat Sessions conference in the Netherlands. He covered mul...