All Articles

SAP (5)

SAP NetWeaver ABAP security configuration part 2: Default passwords for access to the application

Posted by Alexander Polyakov on February 2, 2015 at 5:00am

Second critical category. Default passwords for access to the application

For the two previous weeks we’ve been discussing the top-9 critical areas and the 33 steps to be taken for security assessment. Ultimately, we’ve covered patch management flaw

SAP NetWeaver ABAP Security Configuration Part 4: Open remote management interfaces

Posted by Alexander Polyakov on March 25, 2015 at 10:30pm

Today we are going on with our series of articles where we describe the 33 steps to security. The subject is of great significance not only to a small group of SAP infosec specialists, but to all those people who work with ERP systems as recent years

SAP NetWeaver ABAP Security Configuration Part 5: Insecure Settings

Posted by Alexander Polyakov on April 2, 2015 at 3:30am

Each application has several security settings that do not fit into any of the critical issues groups mentioned in our series of articles.Among such settings there are both standard settings (such as password length or the number of attempts given to

Securing SAP Systems from XSS vulnerabilities Part 2: Defense for SAP NetWeaver ABAP

Posted by Alexander Polyakov on August 25, 2015 at 1:16am

We continue our series of posts giving a review of one of the most frequent vulnerability which affects a lot of SAP modules: cross-site scripting, or XSS. Today's post describes how to protect SAP NetWeaver ABAP from XSS.

From the developer’s perspec

SAP Security Notes September 2015

Posted by Alexander Polyakov on September 29, 2015 at 8:13am

SAP has released the monthly critical patch update for September 2015. This patch update closes 20 vulnerabilities and 5 updates in SAP products, 16 of which are high priority, some of them belong to the SAP HANA security area. The most common vulner