SAP Flags Four Maximum-Severity Flaws as JPMorgan Turns Bullish on AI Payoff
Published on 11/11/2026 at 15:31 | Editorial boerse-global.de
SAP's November Security Patch Day delivered a heavy load of fixes, with four vulnerabilities earning the maximum CVSS score of 10.0. The affected products are SAP NetWeaver, Web Dispatcher, SAML2 and SAP Gateway, according to a report published today by specialist media and based on findings from Onapsis.
The Gateway flaw, tracked as CVE-2026-89103, has already been closed. According to the report, it could allow the execution of operating system commands over network access without any login credentials — a combination that explains the top-end severity rating.
SAP issued 43 new and updated security notes in total, including twelve HotNews items and 13 carrying high priority. The company also published four GitHub security advisories, so the release spans fresh bulletins as well as revisions to existing guidance.
JPMorgan Doubles Its Target
Away from the patch cycle, JPMorgan upgraded SAP from "Neutral" to "Overweight" on Monday. The price target jumped from €175 for December 2027 to €275 for December 2028.
Should investors sell immediately? Or is it worth buying SAP?
The broker pointed to enterprise AI moving out of pilot projects and into production use. In that shift, established platforms such as SAP stand to benefit from cleanly integrated data, security, governance and predictable costs, the bank argued.
AstraZeneca Expands a 20-Year Alliance
SAP also reported an expansion of its two-decade partnership with AstraZeneca. The pharmaceutical group is moving to SAP Cloud ERP Private under RISE with SAP and is evaluating SAP Business AI applications across finance, supply chain and manufacturing. Those AI functions remain under review, while the migration itself forms part of the broadened collaboration.
By SAP's account, the company-wide migration covers one of the largest SAP system landscapes in the life-sciences sector.
SAP at a turning point? This analysis reveals what investors need to know now.
Buyback Keeps Rolling
The software maker disclosed further purchases under its ongoing share buyback programme. Roughly 465,000 of its own shares changed hands in the reporting period, at an aggregate value of about €95.4 million, according to the mandatory notification. That brought total repurchases under the programme to around 9.6 million shares as of the reported cut-off date.
Investors will get their next hard numbers on 28 January 2027, when SAP publishes preliminary results for the fourth quarter and full year 2026. An analyst and investor conference is scheduled for 07:00 CET that day.
Ad
SAP Stock: New Analysis - 11 November
Fresh SAP information released. What's the impact for investors? Our latest independent report examines recent figures and market trends.
