onedevatlasBeta
Browse the atlas
AllBTPCAPUI5ABAP
ServiceServicetypeA BTP service you subscribe to and bind, rather than install. It has plans and regions, not versions, and may deliver a product that lives outside the atlas.See every one →What this type is →by SAPby SAPoriginPublished by SAP itself. A visible facet, never an input to a reading — a dormant official plugin reads exactly like a dormant independent one.See every one →

Application Vulnerability Report

A BTP service that tracks vulnerabilities in the open-source components of applications deployed in a BTP landscape, with an OData API for taking the report into ticketing systems.

Applications a customer deploys on BTP carry open-source components, and a security issue in one of them puts the business data behind the application at risk. Application Vulnerability Report detects those vulnerabilities across a BTP landscape and tracks them until they are mitigated. The report data is also exposed through an OData API built on the SAP Cloud Application Programming Model, so it can be fed into IT Service Management workflows or a ticketing system.

Homepage
Docs
What’s New

Where it sits

Lives in
BTP/BAIP
Provides
Vulnerability scanningBTPVulnerability scanningcapabilityFinding known vulnerabilities in the open-source components an application depends on, in the project's dependency tree before it is deployed and in the application once it runs, and following each one until it is fixed. Checking a file somebody uploaded is [malware scanning](capability:malware-scanning), and checking an application's own source for flaws is [static analysis](capability:abap-static-analysis).

Who is behind it

SAPSAPOrganisationMaintains this
In the atlas: maintains 137, wrote 14@SAPmaintainer

What it declares

Every artifact

Type
Service
Origin
By SAP

As a service

Plans
1
Regions
2

Connections1

What’s New2

from SAP Help Portal, read
help.sap.com/whats-new, Application Vulnerability ReportOn SAP Help Portal
2entries since , per month

  1. Graphical User Interface Now Available

    NewBetaInfo onlyCloud Foundry

  2. Application Vulnerability Report Now Available

    NewBetaInfo onlyCloud Foundry

titles and labels, read

Others providing1

Compare all 2 on the Vulnerability scanning page →
Vulnerability scanning
  1. audit-summaryGroups npm audit findings by root dependency, with failing thresholdsfrom General

Details

Sources1
Added by handdiscovered herechecked

Sources are graph entities: the same page may back several entries, and an unreachable source flags every row that rests on it.

Compatibility and provenance
discovered viaAdded by hand
first seen in the atlas
ecosystem and domainbtp, security-and-compliance
History in the atlas1
  1. First seen.
For your agent
Ref
artifact:btp-application-vulnerability-report
JSON
/artifacts/btp-application-vulnerability-report.json
MCP
Connecting an agent