SAP Balances Security Cleanup With AstraZeneca Cloud Win and a Doubled JPMorgan Target

SAP's November security patch landed alongside a stretch of encouraging news for the German software maker, with the Walldorf company pushing out 35 new security notes — nine of them rated critical — in the same week that a major brokerage turned bullish and a pharmaceutical heavyweight expanded its cloud commitment.

Four of the disclosed vulnerabilities carry the maximum CVSS score of 10.0, affecting NetWeaver, Web Dispatcher and Gateway, according to media reports drawn from the security advisories. As of the Thursday reports, there were no indications of active exploitation.

JPMorgan Flips to Overweight, Lifts Target to 275 Euros

The patch release came after JPMorgan upgraded SAP from "Neutral" to "Overweight" on Monday, simultaneously raising its price target from 175 to 275 euros. Analyst Toby Ogg pointed to artificial intelligence moving out of pilot mode and into productive use inside enterprises, while also flagging progress on SAP's own AI offering.

That vote of confidence was followed on Tuesday by news that SAP and AstraZeneca are broadening their partnership. The drugmaker intends to move to SAP Cloud ERP Private under RISE with SAP and is evaluating the use of SAP Business AI. According to SAP, the planned migration covers one of the largest SAP system landscapes in the life sciences sector, extending a relationship that has run for 20 years.

Buyback Rolls On as CO? Data Goes Live

SAP also reported on Tuesday that it had repurchased roughly 465,000 of its own shares via XETRA, with the purchases running from 2 through 6 November. Under the programme, the company had bought back about 9.6 million shares through 6 November inclusive.

Separately, SAP said on Thursday that customers can now access product-related data on CO? footprint and energy consumption for selected cloud products through SAP for Me, delivering consumption and emissions figures at the product level.

Gartner Recognition and a Packed Conference Calendar

SAP reported two Gartner placements on Monday. For Cloud ERP for product-centric enterprises, the company said it was positioned as a leader in the 2026 Magic Quadrant for the fifth consecutive time. It received the same recognition for Cloud ERP for service-centric enterprises, also for the fifth year running — two assessments covering distinct customer groups within the cloud ERP portfolio.

Investors will hear from finance chief Dominik Asam twice in the coming weeks. He is scheduled to appear at the Morgan Stanley TMT Conference on 19 November 2026 and at the UBS Global Technology Conference on 1 December 2026, with both appearances set to be webcast.