SAP Shares Slide 1.1% as Cybersecurity Flaw Sparks Market Turmoil Surging $460M Volume Propels Stock to 217th in Activity

. , . The stock's decline follows urgent cybersecurity warnings about a critical vulnerability in its flagship S/4HANA ERP system.

A high-severity code injection flaw () has been actively exploited in the wild, allowing attackers to inject arbitrary ABAP code into SAP environments. The vulnerability, , enables full system compromise through low-privileged user access, enabling data theft, privilege escalation, and process manipulation. confirmed exploitation attempts in both on-premise and private cloud deployments, noting the patch could be reverse-engineered with relative ease.

Multiple cybersecurity firms have issued alerts. The Dutch warned of limited-scale attacks, while observed a surge in exploitation attempts post-patch release. SAP recommended immediate patch application, implementation of UCON for RFC restrictions, and enhanced monitoring for suspicious activity. The vulnerability affects S4CORE versions 102-108, .

Back-test parameters: Russell 3000 constituents ranked daily by share volume; top 500 stocks bought at close, sold next day at close. , , , . Default setup includes no adjustments to universe, price convention, or volume metric definitions.