Acknowledgments to Security Researchers - Previous Months (2014 on wards)

The SAP Product Security Response Team thanks all researchers and security IT professionals that helped with discovering and solving security vulnerabilities. Their findings have helped SAP to maintain the security and safety of its customers' and partners' SAP systems.

Our acknowledgements page lists those professionals we have worked with successfully in the past. We thank all security researchers for their excellent work and hope to continue the fruitful relationship between security professionals and SAP.

For the current month's acknowledgments, visit theacknowledgments homepage.

For acknowledgements previous to 2014, visit theacknowledgments archive (2011 to 2013)page

November 2015

Blackroot Technologies, Pflash Punk, Virender C Nishad

ERPScan, Alexander Polyakov, Mathieu Geli

Hyundai AutoEver Europe GmbH, Ashar Javed

Martin Maruskin

Muhammad Zeeshan

Onapsis, Fernando Russ, Pablo Artuso, Sergio Abraham

Pradeep Kumar

Shawar Khan

Virtual Forge, Agnes Six, Andreas Wiegenstein, Horst Bartmann, Thomas Kastner

FH Muenster, Damian Poddebniak, Prof. Dr. Sebastian Schinzel

October 2015

ERPScan, Mathieu GELI

Center for Computing Technologies at the Universität Bremen (TZI), Karsten Sohr

Mehmet Nurcan

NCC Group, Soroush Dalili

netizen 01k

Onapsis, Alejandro Gabriel Burzyn, Fernando Russ, Jordan Santarsieri, Juan Perez-Etchegoyen, Nahuel D. Sánchez, Pablo Artuso, Pabio Muller, Sergio Abraham

Pavan Paidy

Tayyab Qadir

ZDI Disclosures, Steven Seeley

September 2015

54H00, Sumit Sahoo

ERPScan, Roman Bezhan, Vahagn Vardanyan

ERPSecurity, Joris van de Vis

Integrity, Tiago Sintra

Novabase, Daniel Garrido

Onapsis, Juan Perez-Etchegoyen, Nahuel D. Sánchez, Sergio Abraham

Syed Daniyal Bin Rashid

August 2015

2NS - Second Nature Security, Juho Nurminen

Bluebanyan Softech Pvt. Ltd, Mohit Sahu

ERPScan, Dmitry Chastuhin,Roman Bezhan, Vahagn Vardanyan

ERPSecurity, Joris van de Vis

Hyundai AutoEver Europe GmbH, Ashar Javed

Onapsis, Fernando Russ,Juan Perez-Etchegoyen, Nahuel D. Sánchez, Pablo Artuso, Sergio Abraham

Weaveability Ltd, Rob Moss

July 2015

Amrita School of Arts and Sciences, Indrajith AN

ERPScan, Alexander Polyakov

ESNC, Ertunga Arsal

Hyundai AutoEver Europe GmbH, Ashar Javed

Onapsis, Juan Perez-Etchegoyen, Sergio Abraham

Subgraph, David Mckinney

Trustwave, Martin Rakhmanov

Werth IT, Thomas Werth

June 2015

Daimler TSS GmbH, Jürgen Bilberger
ERPScan, Diana Grigoreva,Rustem Gazizov, Vahagn Vardanyan

Kamran Saifullah

Onapsis, Pablo Muller, Juan Perez-Etchegoyen, Sergio Abraham

Sogeti, Mark Deiss

May 2015

Alexander Klink

Abdul Wasay

Core Security,Martin Gallo

ERPScan, Dmitry Chastuhin, Vahagn Vardanyan

Pegasus

Onapsis,Juan Perez-Etchegoyen, Nahuel D. Sánchez, Pablo Artuso, Will Vandevanter

Trustwave, Martin Rakhmanov

Virtual Forge, Andreas Wiegenstein

Xiting, Julius Bussche

April 2015

Onapsis,Nahuel D. Sánchez

Onapsis,Fernando Russ

Martijn Sprengers

March 2015

ERPScan,Dmitry Chastuhin, Vahagn Vardanyan

ESNC, Ertunga Arsal

Onapsis,Sergio Abraham

February 2015

ERPScan, Dmitry Chastuhin, Dmitry Evdokimov, George Nosenko, Vahagn Vardanyan

ING Services Polska,Lukasz Miedzinski

Onapsis, Nahuel D. Sánchez, Fernando Russ

Roberto Garcia Amoriz

Virtual Forge, Andreas Wiegenstein

January 2015

ERPScan, Nikolay Mescherin

ESNC, Ertunga Arsal

Gopal Bisht

Gerasimos Panou

Onapsis, Sergio Abraham, Nahuel D. Sánchez, Fernando Russ

Rabiya Batool

Sense of Security, Fatih Ozavci

Trustwave SpiderLabs, Martin Rakhmanov

Virtual Forge, Andreas Wiegenstein

December 2014

Diego Bardalez Plaza

ERPScan, George Nosenko, Vahagn Vardanyan

ESNC, Ertunga Arsal

Genral Motors, Markus Seibel

Mohamed Abdelbaset Elnoby

Sense of Security, Fatih Ozavci

Virtual Forge, Andreas Wiegenstein, Xu Jia

ZDI, John Leitch

November 2014

Emaze Networks S.p.A., Enrico Milanese

ERPScan, Vahagn Vardanyan

ERPSecurity,Joris van de Vis

ESNC, Ertunga Arsal, Mert Suoglu

Kamil Sevi, Kamil Sevi

Portcullis Advisories, Tim Brown

Siemens AG

Subgraph, David Mckinney

Virtual Forge, Andreas Wiegenstein, Xu Jia

October 2014

AKS IT Services, V. Lakshmi Kiran

Core Security, Martin Gallo

ERPScan, Alexey Tyurin,Dmitry Chastuhin, Igor Ilyin, Roman Bazhin, Vahagn Vardanyan

ERPSecurity, Joris van de Vis

Onapsis, Will Vandevanter

Subgraph, David Mckinney

Virtual Forge, Andreas Wiegenstein, Frederik Weidemann, Peter Werner, Xu Jia

September 2014

ERPSecurity,Joris van de Vis, SAP Security Note 2030775

ERPSecurity,Joris van de Vis, SAP Security Note 2043506

ERPSecurity,Joris van de Vis, SAP Security Note1908631

ESNC, Ertunga Arsal, SAP Security Note 2015232

ESNC, Ertunga Arsal, SAP Security Note 1971397

Onapsis, Juan Pablo Perez Etchegoyen, Will Vandevanter, SAP Security Note 2039905

Onapsis, Pablo Muller, SAP Security Note 1979454

Sense of Security, Fatih Ozavci, SAP Security Note 2042074

Sense of Security, Fatih Ozavci, SAP Security Note 2039924

Sense of Security, Fatih Ozavci, SAP Security Note 2036547

August 2014
BDO, Buslov Dmitry, SAP Security Note 2028484

ERPSecurity,Joris van de Vis, SAP Security Note 1739143

ERPSecurity,Joris van de Vis, SAP Security Note 2017651

ERPScan, George Nosenko, SAP Security Note 2018221

ERPScan, George Nosenko, SAP Security Note 2025931

ESNC, Ertunga Arsal, SAP Security Note 1870485

NTT Com Security, Stephen Breen, SAP Security Note 2044175

NTT Com Security, Justin Kennedy, SAP Security Note 2053074

Trustwave, Martin Rakhmanov, SAP Security note 2044220

Virtual Forge, Andreas Wiegenstein & Xu Jia, SAP Security Note 1987773

Virtual Forge, Andreas Wiegenstein, SAP Security Note 1769064

Virtual Forge, Andreas Wiegenstein, SAP Security Note 1992114

ZDI, Aniway Anyway, SAP Security Note 1999142

July 2014

ERNW, Florian Grunow, SAP Security Note 1988956

ERPScan, Dmitry Chastuhin, SAP Security Note 2011169

Red-Team, Dave Hewson, SAP Security Note 1962104

ZDI Disclosures, Shanoon, SAP Security Note 2028891

NTT Com Security, Stephen Breen, SAP Security Note 2036562

June 2014

Compass Security, Stefan Horlacher, SAP Security Note 1908531

ERPScan, Dmitry Chastuhin, Vahagn Varda SAP Security Note 2014881

Onapsis, Will Vandevanter, SAP Security Note 2015446

Onapsis, Will Vandevanter, SAP Security Note 2001109

Onapsis, Will Vandevanter, SAP Security Note 2001106

Onapsis, Will Vandevanter, SAP Security Note 1998990

Onapsis, Will Vandevanter, SAP Security Note 1941562

Onapsis, Nahuel D. Sánchez, SAP Security Note 1967780

Subgraph, David Mckinney, SAP Security Note 1981048

Subgraph, David Mckinney, SAP Security Note 1971270

May 2014

Atos IT Gmbh,Josè Manuel Lorenzo Lopez, SAP Security Note 1979438

ESNC, Ertunga Arsal, SAP Security Note1889999

Onapsis, Will Vandevanter, SAP Security Note2009696

Positive Technologies, Dmitry Gutsko, SAP Security Note 1997455

April 2014

Core Security, Martin Gallo,SAP Security Note 1986895

ERPSecurity, Joris van de Vis, SAP Security Note 1940405

ERPSecurity, Joris van de Vis, SAP Security Note 1971516

ESNC, Ertunga Arsal, SAP Security Note 1940405

Onapsis, Nahuel D. Sánchez, SAP Security Note 1974016

Onapsis, Will Vandevanter, SAP Security Note1993349

Onapsis, Sergio Abraham, SAP Security Note 1929473

Onapsis, Nahuel D. Sánchez, SAP Security Note 1778940

Subgraph, David McKinney, SAP Security Note1975842

University Bremen, Christian Liebig, SAP Security Note 1975842

University Bremen, Christian Liebig, SAP Security Note 2001778

Virtual Forge, Andreas Wiegenstein, SAP Security Note 1987413

Virtual Forge, Andreas Wiegenstein & Xu Jia, SAP Security Note 1985100

Virtual Forge, Andreas Wiegenstein, SAP Security Note 1983739

Virtual Forge, Frederik Weidemann, SAP Security Note 1878371

March 2014
Emaze Networks S.p.A., Enrico Milanese, SAP Security Note 1946420

ERPSecurity, Joris van de Vis, SAP Security Note 1965610

ERPSecurity, Joris van de Vis, SAP Security Note 1884678

ESNC, Ertunga Arsal, SAP Security Note 1971238

Onapsis, Sergio Abraham, SAP Security Note 1964428

Onapsis, Sergio Abraham, Manuel Muradas, SAP Security Note 1963932

February 2014

ERPScan,Alexander Polyakov, SAP Security Note1860923

ESNC,Ertunga Arsal, SAP Security Note1945300

Onapsis, Sergio Abraham,SAP Security Note1791081

Onapsis, Sergio Abraham,SAP Security Note1768049

Onapsis, Sergio Abraham,SAP Security Note1920323

Onapsis, Sergio Abraham,SAP Security Note1915873

Onapsis, Sergio Abraham,SAP Security Note1914777

Onapsis, Sergio Abraham,SAP Security Note1911174

Onapsis, Sergio Abraham,SAP Security Note1795463

Onapsis, Sergio Abraham,SAP Security Note1789569

Onapsis, Sergio Abraham,SAP Security Note1738965

Onapsis, Juan Pablo Perez Etchegoyen, Jordan Santarsieri, Pablo Muller,SAP Security Note1939334

CyberSecurity Maldives,Shabnoon Khalid, SAP Security Note1905408

January 2014

ERPScan,Neyolov Evgeny, SAP Security Note1828885

ERPScan, Dmitry Chastuhin, SAP Security Note1788080

Emaze Networks S.p.A., Enrico Milanese, SAP Security Note1932505

ERNW,Florian Grunow, SAP Security Note 1924853

ESNC, Ertunga Arsal, SAP Security Note 1886051

ESNC, Ertunga Arsal, SAP Security Note 1865109

Onapsis, Nahuel D. Sánchez, SAP Security Note 1894049

Onapsis,Juan Pablo Perez Etchegoyen, SAP Security Note,1865109
Onapsis,Nahuel D. Sánchez, SAP Security Note 1918333

Onapsis, Nahuel D. Sánchez, SAP Security Note1917381

Onapsis, Jordan Santarsieri, SAP Security Note 1922547

Onapsis,Jordan Santarsieri, SAP Security Note 1910914

Onapsis, Will Vandevanter, SAP Security Note 1931399

SecuRing, Krzysztof Kotowicz, SAP Security Note 1916560

Virtual Forge, Andreas Wiegenstein & Xu Jia, SAP Security Note 1949046

Virtual Forge, Andreas Wiegenstein & Xu Jia, SAP Security Note 1898046

Virtual Forge,Xu Jia, SAP Security Note 1884596

Virtual Forge, Andreas Wiegenstein, SAP Security Note1956096