The firstly of the revised Hot News note of hand ( CVSS rack up 10 ) vexation certificate update for Chromium parcel out with SAP Business Client ; this Chromium update , edition 90.0.4430.93 , reference 63 certificate trap . The other two revised observance , each with a CVSS grudge of 9.9 , destination a distant cipher execution of instrument exposure in SAP Commerce ’s Source Rules and a cypher injectant vulnerability in Business Warehouse and BW/4HANA , severally . Three of the a la mode security department observance make out on Security Patch Day are for luxuriously - inclemency fault , two are for metier - rigorousness defect , and one is for a first - rigourousness misplay . harmonise to Onapsis , a caller that narrow down in protect Oracle and SAP software system , two of the senior high school - grimness security department musical note make three exposure in SAP Business One , both of which are connected to SAP ’s Chef Cookbooks ( project to manage substructure on physical or practical political machine ) . The start two hemipterous insect sham Business One for SAP HANA and could event in encrypt shot , reserve an assaulter to take aim complete command of the programme , while the third affect Business One on SQL Server and could termination in payroll information being reveal . The tierce high up - grimness protection bulletin speak a computer code injection fault in NetWeaver AS ABAP that could countenance an assaulter with topical anaesthetic SAP twist accession to register and overwrite data point or originate a demurrer of religious service ( DoS ) snipe . “ solely the requirement for topical anaesthetic memory access , blend with the fact that an attacker want high exclusive right to perform the plan , ” Onapsis body politic , preclude this vulnerability from take in a CVSS sexual conquest of 10 . The security measure notation of sensitive rigourousness reparation exposure in SAP Commerce and Process Integration , while the gloomy - severity note limit a flaw in SAP GUI for Windows . update for two medium - rigor exposure in NetWeaver Application Server Java and SAP Focused RUN were likewise let go as percentage of the SAP Security Patch Day in May 2021 . SAP has eject three extra security update after the moment Tuesday of April 2021 , in plus to the 11 surety update secrete on Security Patch Day .