SAP Güvenlik Uyarıları - Temmuz 2025

📊 Aylık Özet

2025 yılının Temmuz ayında toplam 37 güvenlik uyarısı yayınlandı.

Risk Dağılımı

Kritiklik Seviyesi	Sayı	CVSS Aralığı
🚨 Kritik	6	9.0 - 10.0
⚠️ Yüksek	5	7.0 - 8.9
⚡ Orta	24	4.0 - 6.9
ℹ️ Düşük	2	0.1 - 3.9

⚠️ Kritik Uyarı

Bu ayda 6 kritik güvenlik uyarısı tespit edildi. Bu uyarılar acil eylem gerektirir ve en kısa sürede ele alınmalıdır.

📋 Detaylı Güvenlik Uyarıları Tablosu

SAP Note	CVE No	Açıklama	CVSS Skoru	Kritiklik	Etkilenen Uygulamalar
-	CVE-2025-42956	SAP Security Patch Day - CVE-2025-42956	-	⚡ Orta	SAP NetWeaver Application Server ABAP
-	CVE-2025-42992	SAP Security Patch Day - CVE-2025-42992	-	⚡ Orta	SAPCAR
-	CVE-2025-30018	SAP Security Patch Day - CVE-2025-30018	-	⚡ Orta	SAP Supplier Relationship Management (Live Auction Cockpit) Version – SRM_SERVER 7.14
-	CVE-2025-30011	SAP Security Patch Day - CVE-2025-30011	-	⚡ Orta	SAP Supplier Relationship Management (Live Auction Cockpit) Version – SRM_SERVER 7.14
-	CVE-2025-30010	SAP Security Patch Day - CVE-2025-30010	-	⚡ Orta	SAP Supplier Relationship Management (Live Auction Cockpit) Version – SRM_SERVER 7.14
-	CVE-2025-30009	SAP Security Patch Day - CVE-2025-30009	-	⚡ Orta	SAP Supplier Relationship Management (Live Auction Cockpit) Version – SRM_SERVER 7.14
3578900	CVE-2025-30012	SAP Security Patch Day - CVE-2025-30012	10.0	🚨 Kritik	SAP Supplier Relationship Management (Live Auction Cockpit) Version – SRM_SERVER 7.14
3618955	CVE-2025-42967	SAP Security Patch Day - CVE-2025-42967	9.9	🚨 Kritik	SAP S/4HANA and SAP SCM (Characteristic Propagation)
3621771	CVE-2025-42963	SAP Security Patch Day - CVE-2025-42963	9.1	🚨 Kritik	SAP NetWeaver Application Server for Java (Log Viewer ) Version – LMNWABASICAPPS 7.50
3610892	CVE-2025-42966	SAP Security Patch Day - CVE-2025-42966	9.1	🚨 Kritik	SAP NetWeaver (XML Data Archiving Service)
3621236	CVE-2025-42964	SAP Security Patch Day - CVE-2025-42964	9.1	🚨 Kritik	SAP NetWeaver Enterprise Portal Administration Version – EP-RUNTIME 7.50
3620498	CVE-2025-42980	SAP Security Patch Day - CVE-2025-42980	9.1	🚨 Kritik	SAP NetWeaver Enterprise Portal Federated Portal Network Version – EP-RUNTIME 7.50
3623440	CVE-2025-42953	SAP Security Patch Day - CVE-2025-42953	8.1	⚠️ Yüksek	SAP NetWeaver Application Server for ABAP
3600846	CVE-2025-42959	SAP Security Patch Day - CVE-2025-42959	8.1	⚠️ Yüksek	SAP NetWeaver ABAP Server and ABAP Platform
3565279	CVE-2024-53677	SAP Security Patch Day - CVE-2024-53677	8.0	⚠️ Yüksek	SAP Business Objects Business Intelligence Platform (CMC) Version – ENTERPRISE 430, 2025
3623255	CVE-2025-42952	SAP Security Patch Day - CVE-2025-42952	7.7	⚠️ Yüksek	SAP Business Warehouse and SAP Plug-In Basis
3610591	CVE-2025-42977	SAP Security Patch Day - CVE-2025-42977	7.6	⚠️ Yüksek	SAP NetWeaver Visual Composer Version – VCBASE 7.50
3595143	CVE-2025-43001	SAP Security Patch Day - CVE-2025-43001	6.9	⚡ Orta	SAPCAR
3580384	CVE-2025-42993	SAP Security Patch Day - CVE-2025-42993	6.7	⚡ Orta	SAP S/4HANA (Enterprise Event Enablement)
3577300	CVE-2025-42997	SAP Security Patch Day - CVE-2025-42997	6.6	⚡ Orta	SAP Gateway Client
3617380	CVE-2025-42985	SAP Security Patch Day - CVE-2025-42985	6.1	⚡ Orta	SAP BusinessObjects Content Administrator workbench
3604212	CVE-2025-42962	SAP Security Patch Day - CVE-2025-42962	6.1	⚡ Orta	SAP Business Warehouse (Business Explorer Web 3.5 loading animation)
3596987	CVE-2025-42969	SAP Security Patch Day - CVE-2025-42969	6.1	⚡ Orta	SAP NetWeaver Application Server ABAP and ABAP Platform Version – SAP_BASIS 740, SAP_BASIS 750, SAP_BASIS 751
3617131	CVE-2025-42981	SAP Security Patch Day - CVE-2025-42981	6.1	⚡ Orta	SAP NetWeaver Application Server ABAP
3595156	CVE-2025-42970	SAP Security Patch Day - CVE-2025-42970	5.8	⚡ Orta	SAPCAR
3607513	CVE-2025-42979	SAP Security Patch Day - CVE-2025-42979	5.6	⚡ Orta	SAP GUI for Windows
3606103	CVE-2025-42973	SAP Security Patch Day - CVE-2025-42973	5.4	⚡ Orta	SAP Data Services (DQ Report) Version – SBOP_DS_MANAGEMENT_CONSOLE 4.3, 2025
3621037	CVE-2025-42968	SAP Security Patch Day - CVE-2025-42968	5.0	⚡ Orta	SAP NetWeaver (RFC enabled function module)
3610322	CVE-2025-42961	SAP Security Patch Day - CVE-2025-42961	4.9	⚡ Orta	SAP NetWeaver Application Server for ABAP Version – SAP_BASIS 700, SAP_BASIS 701, SAP_BASIS 702
3610056	CVE-2025-42974	SAP Security Patch Day - CVE-2025-42974	4.3	⚡ Orta	SAP NetWeaver and ABAP Platform (SDCCN) Version – ST-PI 2008_1_700, 2008_1_710
3626440	CVE-2025-42986	SAP Security Patch Day - CVE-2025-42986	4.3	⚡ Orta	SAP NetWeaver and ABAP Platform
3608991	CVE-2025-42960	SAP Security Patch Day - CVE-2025-42960	4.3	⚡ Orta	SAP Business Warehouse and SAP BW/4HANA BEx Tools Version – DW4CORE 100, SAP_BW 700, SAP_BW_VIRTUAL_COMP 701
3598118	CVE-2025-42965	SAP Security Patch Day - CVE-2025-42965	4.1	⚡ Orta	SAP BusinessObjects BI Platform Central Management Console Promotion Management Application Version – ENTERPRISE 430, 2025, 2027
3573199	CVE-2025-31326	SAP Security Patch Day - CVE-2025-31326	4.1	⚡ Orta	SAP BusinessObjects Business Intelligence Platform (Web Intelligence) Version – ENTERPRISE 430, 2025, 2027
3595141	CVE-2025-42971	SAP Security Patch Day - CVE-2025-42971	4.0	⚡ Orta	SAPCAR Version – SAP_CAR 7.53, 7.22EXT
3557179	CVE-2025-42978	SAP Security Patch Day - CVE-2025-42978	3.5	ℹ️ Düşük	SAP NetWeaver Application Server Java Version – ENGINEAPI 7.50
3608156	CVE-2025-42954	SAP Security Patch Day - CVE-2025-42954	2.7	ℹ️ Düşük	SAP NetWeaver Business Warehouse (CCAW application) Version – DW4CORE 100, SAP_BW 700, SAP_BW_VIRTUAL_COMP 701

🔍 Analiz ve Öneriler

Genel Değerlendirme

7. ayda yüksek risk seviyesi tespit edilmiştir. 6 kritik uyarı derhal ele alınması gereken güvenlik açıklarını işaret etmektedir. Özellikle CVSS skoru 9.0 ve üzeri olan uyarılara öncelik verilmelidir.

Güvenlik Önerileri

1. Acil Öncelikler: 6 kritik uyarı için derhal patch uygulaması yapın.

2. Orta Vadeli Planlama: Yüksek ve orta seviyeli uyarılar için 29 uyarı bulunmaktadır.

3. Sistem İzleme: Etkilenen sistemlerde güvenlik loglarını düzenli olarak izleyin.

4. Patch Yönetimi: SAP Patch Day süreçlerinizi gözden geçirin ve güncel tutun.

📚 Ek Bilgiler

• Rapor Tarihi: 15.07.2025
• Kaynak: SAP Security Alert Database
• Kapsam: Temmuz 2025 ayı güvenlik uyarıları
• Toplam Uyarı: 37

---

Not: Bu rapor otomatik olarak oluşturulmuştur ve editörler tarafından gözden geçirilmektedir. Güncel bilgiler için lütfen resmi SAP güvenlik kanallarını takip edin.