Slashdot Mirror

← Back to Stories (view on slashdot.org)

Top Cyber Attack Vectors For Critical SAP Systems

Posted by samzenpus on from the protect-ya-neck dept.

An anonymous reader writes: Despite housing an organization's most valuable and sensitive information, SAP systems are not protected from cyber threats by traditional security approaches. Based on assessments of hundreds of SAP implementations, the Onapsis Research Labs study found that over 95 percent of SAP systems were exposed to vulnerabilities that could lead to full compromise of the company's business data and processes. Most companies are also exposed to protracted patching windows averaging 18 months or more. In 2014 alone, 391 security patches were released by SAP, averaging more than 30 per month. Almost 50 percent of them were ranked as "high priority" by SAP.

3 of 65 comments (clear)

  1. Re:Consider the source... by Headw1nd · · Score: 2, Interesting

    Well, to be honest, if you work with SAP everyday you can' t help but realize it sucks.

  2. Re:Consider the source... by Anonymous Coward · · Score: 4, Interesting

    I do not disagree at all that SAP sucks. I work for a large retailer and sit right next to the SAP guys. I've never seen such a miserable lot. Daily banging their heads against one stupid SAP issue after another and always complaining about SAP support being completely useless.

    I'm just not sure I buy the 95% of installs are horribly insecure claims coming from a company that's only product is securing SAP.

  3. Re:wha? by Anonymous Coward · · Score: 3, Interesting

    SAP is the third largest software company in the world (source). What rock do you live under?