资讯

新浪网4月

Win11 24H2 更新引发 SAP GUI 崩溃等兼容性问题，微软与安全厂商协同排查

IT之家 4 月 18 日消息，WindowsLatest 发现，微软本月发布的 Windows 11 24H2 累积更新（IT之家注：KB5055523）存在兼容性问题，导致企业级应用 SAP GUI（版本 800 32 位）在启动或连接系统时崩溃。 故障应用程序的位置：故障应用路径：C:\Program Files (x86)\SAP\FrontEnd\SAPgui ...
SiliconANGLE2月

Researchers uncover weak encryption in SAP user interface for Windows and Java

SAP SE today addressed two newly disclosed vulnerabilities in its SAP Graphical User Interface client applications following their discovery in coordinated research by Pathlock Inc. and Fortinet Inc.
腾讯网2月

SAP GUI加密缺陷致敏感数据面临泄露风险_腾讯新闻

CVE-2025-0055漏洞的核心在于加密机制失效。 SAP GUI Windows版将用户输入的ID、社保号等数据通过静态XOR密钥加密后存入SQLite数据库文件（SAPHistory.db）。
CSOonline2月

SAP GUI flaws expose sensitive data via weak or no encryption

Newly disclosed vulnerabilities in SAP GUI for Windows and Java store user data with outdated or no encryption, posing compliance and breach risks for enterprises. SAP GUI, a trusted interface for ...

SAP Patchday: Critical vulnerabilities allow malicious code to be injected

In August, SAP issues 15 new security notes on vulnerabilities in its products. Some of them pose a critical risk.
Infosecurity-magazine.com2月

SAP GUI Input History Found Vulnerable to Weak Encryption

Two vulnerabilities in SAP’s Graphical User Interface (SAP GUI) input history feature have been disclosed, revealing weaknesses in how sensitive user data is stored locally. The issues, discovered by ...