onapsis.com Surge in Cyberattacks Targeting SAP Systems Amid Patch Delays
Article Content
- •SAP systems face a 210% increase in vulnerability exploitation from 2024 to 2025.
- •Patching SAP vulnerabilities takes an average of 97 days, allowing attackers to exploit them quickly.
- •Recent attacks have targeted core business applications, leading to significant operational risks.
Over the past year, cyberattacks against critical business applications like SAP have surged, with attackers exploiting vulnerabilities before patches can be deployed. SAP systems, which are crucial for global commerce, take an average of 97 days to test and deploy patches, while attackers can weaponize vulnerabilities in as little as 72 hours. This gap has led to a 210% increase in the active exploitation of SAP vulnerabilities from 2024 to 2025. Organizations relying on SAP for enterprise resource planning are particularly vulnerable, as many assume standard security practices apply. The consequences of these attacks include data theft and operational shutdowns, affecting major corporations worldwide. The urgency for improved security measures in SAP environments is critical as the threat landscape evolves.
Ask AI about this cluster
Answers cite the sources they use
Timeline
More articles in this cluster (4)
Following this threat?
Track SAP in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.
Free account · no card needed
Common questions
What are the primary vulnerabilities in SAP?
How can organizations mitigate these risks?
What impact do these attacks have on businesses?
Continue Reading
CVE-2015-3306 Exploited in ProFTPD FTP Servers CVE-2015-3306, a vulnerability in ProFTPD 1.3.5, allows remote attackers to read and write arbitrary files using the SITE CPFR and SITE CPTO commands. This exploit can lead to unauthorized access and potential remote code execution, as the commands are executed with the privileges of the ProFTPD service. Active…
CISA Mandates Urgent Patching of Five Critical Flaws Exploited by Flax Typhoon The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has ordered federal agencies to patch five critical vulnerabilities by October 11, 2026, following exploitation by the China-linked hacking group Flax Typhoon. The vulnerabilities, added to CISA's Known Exploited Vulnerabilities (KEV) catalog, include…