补丁日：2023年2月
发布于 2023年2月14日 · 26 条安全说明 · 来源：SAP 安全补丁日页面
计划日期：2023年2月14日（每月第二个星期二）
- 新发布
- 21
- 更新
- 5
- 严重
- 1
- 高
- 5
- 最高 CVSS
- 10.0
- 已被利用
- 0
本月摘要
共 26 条安全说明（新发布 21 条，更新 5 条），其中严重 1 条、高 5 条，最高 CVSS 10.0。
优先修补
排序依据：是否已知被利用（CISA KEV），其次是 SAP 优先级，再次是 CVSS 分数。仅供分诊参考，不能替代您自己的风险评估。
Security updates for the browser control Google Chromium delivered with SAP Business Client
Code Injection vulnerability in SAP BASIS
Privilege Escalation vulnerability in SAP Start Service
Information disclosure vulnerability in SAP BusinessObjects Business Intelligence platform
Privilege escalation vulnerability in SAP Business Planning and Consolidation
全部安全说明
SAP 简介中写明 21 条新安全说明和 5 条更新；SAP 表格共列出 26 行（两者可能不同，例如包含 GitHub 安全公告或补发条目）。
SAP 公告中的最高优先级在 2024 年 12 月及以前标为 “Hot News”，自 2024 年 10 月起标为 “Critical”；本站统一显示为“严重”。
显示 26 / 26
| 标题 | CVE | ||||
|---|---|---|---|---|---|
| 2622660 | Security updates for the browser control Google Chromium delivered with SAP Business Client 更新 | SAP Business Client | 严重 | 10.0 | 无 CVE |
| 3268172 | Code Injection vulnerability in SAP BASIS 更新 | SAP BASIS | 高 | 8.8 | CVE-2022-41264 |
| 3285757 | Privilege Escalation vulnerability in SAP Start Service 新发布 | SAP Host Agent Service | 高 | 8.8 | CVE-2023-24523 |
| 3263135 | Information disclosure vulnerability in SAP BusinessObjects Business Intelligence platform 新发布 | SAP BusinessObjects BI Platform | 高 | 8.5 | CVE-2023-0020 |
| 3271091 | Privilege escalation vulnerability in SAP Business Planning and Consolidation 更新 | SAP Business Planning and Consolidation | 高 | 8.5 | CVE-2022-41268 |
| 3256787 | Unrestricted Upload of File in SAP BusinessObjects Business Intelligence Platform (CMC) 新发布 | SAP BusinessObjects BI Platform | 高 | 8.4 | CVE-2023-24530 |
| 2985905 | Missing Authorization check in SAP S/4 HANA Map Treasury Correspondence Format Data 新发布 | SAP S/4HANA | 中 | 6.5 | CVE-2023-24524 |
| 3265846 | Cross Site Scripting in SAP Solution Manager (BSP Application) 新发布 | SAP Solution Manager | 中 | 6.5 | CVE-2023-0024 |
| 3267442 | Cross Site Scripting in SAP Solution Manager (BSP Application) 新发布 | SAP Solution Manager | 中 | 6.5 | CVE-2023-0025 |
| 3270509 | URL Redirection vulnerability in SAP Solution Manager 新发布 | SAP Solution Manager | 中 | 6.5 | CVE-2023-23855 |
| 3281724 | Missing Authorization check in GRC function modules 新发布 | SAP GRC Process Control application | 中 | 6.5 | CVE-2023-0019 |
| 3290901 | Missing Authorization Check in SAP Fiori apps for Travel Management in SAP ERP (My Travel Requests) 新发布 | SAP Fiori apps 1.0 for travel management in SAP ERP | 中 | 6.5 | CVE-2023-24528 |
| 3262544 | Cross-Site Scripting (XSS) vulnerability in SAP NetWeaver AS for Java (Http Provider Service) 更新 | SAP NetWeaver AS Java | 中 | 6.1 | CVE-2022-41262 |
| 3266751 | Cross-Site Scripting (XSS) vulnerability in SAP Solution Manager 7.2 新发布 | SAP Solution Manager | 中 | 6.1 | CVE-2023-23852 |
| 3268959 | Multiple vulnerabilities in SAP NetWeaver AS for ABAP and ABAP Platform 新发布 | SAP NetWeaver AS ABAP / ABAP Platform | 中 | 6.1 | CVE-2023-23859, CVE-2023-23860 |
| 3269118 | Cross-Site Scripting (XSS) vulnerability in SAP NetWeaver AS ABAP (BSP Framework) 新发布 | SAP NetWeaver AS ABAP / ABAP Platform | 中 | 6.1 | CVE-2023-24522 |
| 3269151 | Cross-Site Scripting (XSS) vulnerability in SAP NetWeaver AS ABAP (BSP Framework) 新发布 | SAP NetWeaver AS ABAP / ABAP Platform | 中 | 6.1 | CVE-2023-24521 |
| 3271227 | URL Redirection vulnerability in SAP NetWeaver Application Server for ABAP and ABAP Platform 新发布 | SAP NetWeaver AS ABAP / ABAP Platform | 中 | 6.1 | CVE-2023-23853 |
| 3274585 | Cross-Site Scripting (XSS) vulnerability in SAP NetWeaver AS ABAP (BSP Framework) 新发布 | SAP NetWeaver AS ABAP / ABAP Platform | 中 | 6.1 | CVE-2023-25614 |
| 3282663 | Cross-Site Scripting (XSS) vulnerability in SAP NetWeaver AS ABAP (Business Server Pages application) 新发布 | SAP NetWeaver AS ABAP / ABAP Platform | 中 | 6.1 | CVE-2023-24529 |
| 3283283 | Cross-Site Scripting (XSS) vulnerability in SAP NetWeaver AS for ABAP and ABAP Platform 更新 | SAP NetWeaver AS ABAP / ABAP Platform | 中 | 6.1 | CVE-2023-0013 |
| 3293786 | Cross-Site Scripting (XSS) vulnerability in SAP NetWeaver AS for ABAP and ABAP Platform 新发布 | SAP NetWeaver AS ABAP / ABAP Platform | 中 | 6.1 | CVE-2023-23858 |
| 3275841 | Unrestricted File Upload in SAP Business Planning and Consolidation 新发布 | SAP Business Planning and Consolidation | 中 | 5.4 | CVE-2023-23851 |
| 2788178 | Cross-Site Scripting (XSS) vulnerability in SAP CRM WebClient UI 新发布 | SAP CRM | 中 | 4.3 | CVE-2023-24525 |
| 3263863 | Cross-Site Scripting (XSS) vulnerability in Web Intelligence Interface 新发布 | SAP BusinessObjects BI Platform | 中 | 4.3 | CVE-2023-23856 |
| 3287291 | Missing Authorization check in SAP NetWeaver AS ABAP and ABAP Platform 新发布 | SAP NetWeaver AS ABAP / ABAP Platform | 低 | 3.8 | CVE-2023-23854 |