Vulnerabilities in SAP software