In the Windows version of SAP GUI, data was stored in an SQLite3 database using a weak XOR-based encryption scheme.

Newly disclosed vulnerabilities in SAP GUI for Windows and Java store user data with outdated or no encryption, posing compliance and breach risks for enterprises.

In August, SAP issues 15 new security notes on vulnerabilities in its products. Some of them pose a critical risk.

Two SAP GUI vulnerabilities have been identified exposing sensitive data due to weak encryption in input history features ...