The security maintenance of installed SAP software is key to continuously protect also against new types of attacks or newly identified potential weaknesses.

Based on feedback from customers, partners and SAP user groups, SAP has launched a regular SAP Security Patch Day, scheduled for the second Tuesday of every month — which has been synchronized with the Security Patch Day of other major software vendors.

On these SAP Patch Days, SAP publishes software corrections as SAP Security Notes, focused solely on security to protect against potential weaknesses or attacks. Access SAP Security Notes in the Launchpad, then select All Security Notes, to get the complete list of all SAP Security Notes. We recommend that you implement these corrections at a priority. Several tools are available to help identify, select and implement these corrections.

SAP categorizes SAP Security Notes as Patch Day Security Notes and Support Package Security Notes, with the sole purpose of making you focus on important fixes on patch days and the rest to be implemented automatically during SP upgrades. For details refer to the SAP Security Notes FAQ. Security fixes for SAP NetWeaver based products are also delivered with the support packages.

Starting June 11, 2019, for all new SAP Security Notes with high or very high severity we deliver fix for Support Packages shipped within the last 24 months* for the versions under Mainstream Maintenance and Extended Maintenance. This is extended from the previous Support Package coverage of 18 months. 

Notes with low or medium priority contain corrections in at least the newest support package in all mainstream and extended maintenance releases.

*See the following areas with an exception from the 24 months (starting June 11, 2019) with their general maintenance strategy

• Maintenance Strategy for SAP BW/4 HANA: see SAP Note 2347382
• Maintenance Strategy for SAP Analytics BI Suite: see SAP Note 2771848
• Maintenance Strategy for SAP GUI for Windows and SAP GUI for Java: see SAP Note 147519
• Maintenance Strategy for SAP Kernel: see SAP Note 787302
• Maintenance Strategy for SAP HANA: see documents for HANA1 and HANA2 or SAP Notes 2021789 and 2378962 
• Maintenance Strategy for SAP Business Client for Desktop: see SAP Note 2302074
• Maintenance Strategy for SAP Business One and SAP Business One, version for SAP HANA®: see SAP Note 3209797

Planned Dates for 2023 SAP Security Patch Days

January 10

February 14

March 14

April 11

May 9

June 13

July 11

August 8

September 12

October 10

November 14

December 12