36 firms at risk from that unpatched 2010 SAP vuln? Try 500+

Fixing Java-related bug trickier than it sounds, claims ERP security firm

Analysis A vulnerability in SAP systems that some enterprises have failed to patch for six years is more difficult to fix than previously reported and estimates of enterprise exposure are way too low, according to the security consultancy that originally found it."