29:
683:, which allows potential company-internal attackers to get access to usernames and passwords by listening on the network. This can expose the complete SAP system, if a person is able to get access to this information for a user with extended authorization in the SAP system. Information about this feature is publicly accessible on the Internet.
703:
In total, the vendor has released 25 security patches (aka SAP Security Notes). One of the most notorious vulnerabilities was closed among the set of fixes released in March 2017. The vulnerability in the SAP GUI client for
Windows allows remote code execution. Also, researchers who identified the
678:
SAP is a distributed application, where client software (SAP GUI) installed on a user's workstation is used to access the central SAP server remotely over the company's network. Users need to authenticate themselves when accessing SAP. By default, however, SAP uses
522:
The 64bit version; Quartz themes: Modernization of rendering engine and some additional features; HTML Control based on
Microsoft Edge: Improvements; Usability improvements in many components; Improvements for SAP Logon; Branding images per system and client
724:
ABAP 7.0x or 7.3x servers in the system landscape. Then it can be used on all SAP NetWeaver ABAP servers with a kernel of 7.21 or higher, including on NetWeaver ABAP 7.11 systems (on which
Personas cannot be installed directly).
704:
security issues pointed out that the vulnerability allows an attacker to download ransomware on the SAP server that would be automatically installed on every workstation within a company.
833:
1027:
791:
489:
Introduces Belize theme, aligning GUI's visual design with the rest of SAP's Fiori applications. Retires Enjoy / Streamline / Tradeshow / SystemDependent themes.
923:
422:
Support for
Windows XP; Windows 2003 Server; Windows Vista; Windows 2008 Server; Windows 7 and Office 2010; Built with Visual Studio 2008
812:
945:
169:
761:
692:
1022:
666:. There are several portal-based authentication applications for single sign-on. SAP GUI can have single sign-on with
59:
751:
126:
88:
901:
173:
456:
Replaces Corbu with Blue
Crystal; integrates SAP GUI for Windows 7.40 and Netweaver Business Client 5.0
792:"SAP GUI for Windows 8.00 is coming on 27th of January 2023: New Features & Lifecycle Information"
112:
993:
134:
813:"The SAP GUI Scripting API How to Automate User Interaction -Technology, Examples and Integration"
581:
Supported OS – openSUSE, Fedora Core, Mac OS X, Microsoft
Windows, AIX, OS X Lion, Fedora, Ubuntu
405:
Support for
Microsoft Vista and Office 2007; new "Tweak SAP GUI" tool; new ABAP front-end editor
146:
142:
659:
655:
150:
106:
667:
229:
First "GUI" for SAP software; no graphical elements like checkboxes, radiobuttons and icons
161:
99:
691:
SAP offers an option to strongly protect communication between clients and servers, called
1017:
876:
771:
154:
300:
Windows95-look with flat buttons; tabstrip control and ABAP List Viewer (ALV) introduced
271:
New graphical elements: checkboxes, radiobuttons, group boxes and push buttons on screen
756:
663:
257:
New GUI for
Windows 3.1; System and Application Toolbar added; icons in System Toolbar
1011:
712:
Since 1998 SAP GUI screens (so-called "DynPros") can be adjusted and customized with
343:
GUI is re-designed; multiple-areas are introduced to reduce need for screen changes
28:
854:
439:
Usability enhancements; new customization features; built with Visual Studio 2010
39:
766:
721:
164:, and allows a user to access SAP functionality in SAP applications such as
946:"SAP Vulnerability Puts Business Data at Risk for Thousands of Companies"
138:
165:
130:
970:
733:
Native iOS and
Android implementations of SAP GUI are available from
971:"Can SAP Be Affected By Ransomware? | SAP Cyber Security Solutions"
92:
746:
734:
713:
674:
Criticism of using SAP GUI for authentication to SAP server access
243:
Field length indicated by background colors; fast paths in menus
158:
389:
Unicode support extended; accessibility and usability improved
328:
Active X elements introduced; ALV is now based on grid control
46:
1001:
185:
SAP GUI for the
Windows environment and Apple Macintosh
314:
Screens contain more information to reduce navigation
877:"SAP GUI Family - Additional Topics - Community Wiki"
834:"Lifetime and Support Matrix for SAP GUI for Windows"
670:
as well. Single sign-on also works in the Java GUI.
191:
SAP GUI for HTML / Internet Transaction Server (ITS)
98:
84:
58:
38:
285:Table control introduced; icons added to buttons
176:to the SAP central server in a company network.
950:Threatpost | The first stop for security news
8:
21:
720:". Personas is installed on one of the SAP
530:Java releases – for other operating systems
27:
20:
1028:Enterprise resource planning terminology
533:
199:
783:
716:. Now this can also be achieved with "
924:"Secure Network Communications (SNC)"
772:GUI 770 installation guide on windows
7:
188:SAP GUI for the Java(TM) environment
170:SAP Business Information Warehouse
65:8.00 / January 27, 2023
14:
944:Michael Mimoso (March 22, 2017).
902:"Single Sign-on for SAP Java GUI"
687:SAP Secure Network Communications
149:. It is software that runs on a
33:SAP GUI for Windows version 6.40
729:iOS and Android implementations
643:New themes with HiDPI support
1:
855:"Supported SAP GUI platforms"
762:Secure Network Communications
693:Secure Network Communications
708:Screen editing with Personas
1044:
196:Microsoft Windows releases
752:Public key infrastructure
681:unencrypted communication
80:
54:
26:
127:graphical user interface
16:Component of SAP systems
67:; 19 months ago
662:can also be used for
172:(BW). It is used for
113:Java Virtual Machine
1023:Clients (computing)
1004:(User-ID required).
718:SAP Screen Personas
135:3-tier architecture
23:
1002:SAP Support Portal
904:. January 10, 2009
143:application server
660:Internet Explorer
656:Microsoft Windows
647:
646:
527:
526:
519:January 12, 2027
513:January 27, 2023
497:January 29, 2021
386:December 31, 2010
373:Scripting added
370:December 31, 2010
151:Microsoft Windows
120:
119:
107:Microsoft Windows
1035:
986:
985:
983:
981:
967:
961:
960:
958:
956:
941:
935:
934:
932:
930:
920:
914:
913:
911:
909:
898:
892:
891:
889:
887:
881:wiki.scn.sap.com
873:
867:
866:
864:
862:
857:. April 25, 2018
851:
845:
844:
842:
840:
830:
824:
823:
821:
819:
809:
803:
802:
800:
798:
788:
668:SAP Logon Ticket
578:January 31, 2013
534:
453:November 9, 2019
200:
116:
115:
109:
100:Operating system
75:
73:
68:
50:
49:
31:
24:
1043:
1042:
1038:
1037:
1036:
1034:
1033:
1032:
1008:
1007:
998:
990:
989:
979:
977:
969:
968:
964:
954:
952:
943:
942:
938:
928:
926:
922:
921:
917:
907:
905:
900:
899:
895:
885:
883:
875:
874:
870:
860:
858:
853:
852:
848:
838:
836:
832:
831:
827:
817:
815:
811:
810:
806:
796:
794:
790:
789:
785:
780:
743:
731:
710:
701:
689:
676:
652:
532:
486:April 12, 2022
198:
182:
155:Apple Macintosh
111:
105:
104:
76:
71:
69:
66:
45:
44:
34:
17:
12:
11:
5:
1041:
1039:
1031:
1030:
1025:
1020:
1010:
1009:
1006:
1005:
997:
991:
988:
987:
962:
936:
915:
893:
868:
846:
825:
804:
782:
781:
779:
776:
775:
774:
769:
764:
759:
757:Single sign-on
754:
749:
742:
739:
730:
727:
709:
706:
700:
697:
688:
685:
675:
672:
664:single sign-on
651:
650:Single sign-on
648:
645:
644:
641:
639:
637:
634:
630:
629:
627:
625:
622:
619:
615:
614:
612:
611:March 31, 2018
609:
606:
603:
599:
598:
596:
595:March 31, 2015
593:
590:
587:
583:
582:
579:
576:
573:
570:
566:
565:
563:
561:
558:
555:
551:
550:
547:
544:
541:
538:
531:
528:
525:
524:
520:
517:
514:
511:
507:
506:
504:
503:April 09, 2024
501:
498:
495:
491:
490:
487:
484:
481:
480:February 2019
478:
474:
473:
471:
468:
465:
462:
458:
457:
454:
451:
448:
445:
441:
440:
437:
434:
431:
428:
424:
423:
420:
419:April 09, 2013
417:
414:
411:
407:
406:
403:
402:April 12, 2011
400:
398:
395:
391:
390:
387:
384:
382:
379:
375:
374:
371:
368:
366:
363:
359:
358:
356:
354:
352:
349:
345:
344:
341:
339:
337:
334:
330:
329:
326:
324:
322:
320:
316:
315:
312:
310:
308:
306:
302:
301:
298:
296:
294:
291:
287:
286:
283:
281:
279:
277:
273:
272:
269:
267:
265:
263:
259:
258:
255:
253:
251:
249:
245:
244:
241:
239:
237:
235:
231:
230:
227:
225:
223:
221:
217:
216:
213:
210:
207:
204:
197:
194:
193:
192:
189:
186:
181:
178:
118:
117:
102:
96:
95:
86:
82:
81:
78:
77:
64:
62:
60:Stable release
56:
55:
52:
51:
42:
36:
35:
32:
15:
13:
10:
9:
6:
4:
3:
2:
1040:
1029:
1026:
1024:
1021:
1019:
1016:
1015:
1013:
1003:
1000:
999:
995:
992:
976:
972:
966:
963:
951:
947:
940:
937:
925:
919:
916:
903:
897:
894:
882:
878:
872:
869:
856:
850:
847:
835:
829:
826:
814:
808:
805:
793:
787:
784:
777:
773:
770:
768:
765:
763:
760:
758:
755:
753:
750:
748:
745:
744:
740:
738:
736:
728:
726:
723:
719:
715:
707:
705:
698:
696:
694:
686:
684:
682:
673:
671:
669:
665:
661:
657:
649:
642:
640:
638:
635:
632:
631:
628:
626:
623:
621:February 2020
620:
617:
616:
613:
610:
607:
605:December 2014
604:
601:
600:
597:
594:
591:
589:December 2012
588:
585:
584:
580:
577:
574:
572:December 2009
571:
568:
567:
564:
562:
559:
556:
553:
552:
548:
545:
542:
539:
536:
535:
529:
521:
518:
515:
512:
509:
508:
505:
502:
499:
496:
493:
492:
488:
485:
482:
479:
476:
475:
472:
470:April 9, 2019
469:
466:
463:
460:
459:
455:
452:
449:
446:
443:
442:
438:
436:July 15, 2015
435:
432:
429:
426:
425:
421:
418:
415:
412:
409:
408:
404:
401:
399:
397:February 2007
396:
393:
392:
388:
385:
383:
380:
377:
376:
372:
369:
367:
364:
361:
360:
357:
355:
353:
350:
347:
346:
342:
340:
338:
335:
332:
331:
327:
325:
323:
321:
318:
317:
313:
311:
309:
307:
304:
303:
299:
297:
295:
292:
289:
288:
284:
282:
280:
278:
275:
274:
270:
268:
266:
264:
261:
260:
256:
254:
252:
250:
247:
246:
242:
240:
238:
236:
233:
232:
228:
226:
224:
222:
219:
218:
214:
211:
208:
205:
202:
201:
195:
190:
187:
184:
183:
179:
177:
175:
174:remote access
171:
167:
163:
160:
156:
152:
148:
144:
140:
136:
132:
128:
124:
114:
108:
103:
101:
97:
94:
90:
87:
83:
79:
63:
61:
57:
53:
48:
43:
41:
37:
30:
25:
19:
978:. Retrieved
974:
965:
953:. Retrieved
949:
939:
927:. Retrieved
918:
906:. Retrieved
896:
886:February 11,
884:. Retrieved
880:
871:
859:. Retrieved
849:
837:. Retrieved
828:
816:. Retrieved
807:
795:. Retrieved
786:
732:
717:
711:
702:
690:
680:
677:
653:
557:October 2007
543:Latest patch
540:Release date
447:October 2014
209:Latest patch
206:Release date
122:
121:
40:Developer(s)
18:
975:erpscan.com
818:January 27,
654:SAP GUI on
636:March 2021
546:End of life
212:End of life
1012:Categories
778:References
467:15 (final)
416:17 (final)
413:April 2010
365:March 2002
129:client in
85:Written in
72:2023-01-27
797:April 21,
767:Smartcard
722:NetWeaver
549:Features
430:June 2012
381:June 2004
351:July 2001
336:July 2000
215:Features
994:External
980:July 22,
955:July 22,
929:July 22,
908:July 22,
861:July 22,
839:July 22,
741:See also
699:Security
464:May 2017
139:database
695:(SNC).
537:Release
203:Release
166:SAP ERP
162:desktop
131:SAP ERP
125:is the
123:SAP GUI
70: (
22:SAP GUI
1018:SAP SE
180:Family
147:client
996:links
747:GuiXT
735:GuiXT
714:GuiXT
633:7.70
618:7.50
602:7.40
586:7.30
569:7.20
554:7.10
510:8.00
494:7.70
477:7.60
461:7.50
444:7.40
427:7.30
410:7.20
394:7.10
378:6.40
362:6.20
348:6.10
333:4.6D
982:2018
957:2018
931:2018
910:2018
888:2020
863:2018
841:2018
820:2022
799:2023
319:4.5
305:4.0
293:1996
290:3.1
276:3.0
262:2.1
248:2.0
234:1.1
220:1.0
168:and
159:Unix
145:and
658:or
500:16
483:15
157:or
137:of
133:'s
93:C++
47:SAP
1014::
973:.
948:.
879:.
737:.
608:13
592:10
575:10
560:21
516:8
450:19
433:15
153:,
141:,
110:,
91:,
984:.
959:.
933:.
912:.
890:.
865:.
843:.
822:.
801:.
624:9
89:C
74:)
Text is available under the Creative Commons Attribution-ShareAlike License. Additional terms may apply.
