The contact email address is <security sap com>. Security issues will then be handled by our Security Response Team in direct communication with the reporter of the issues. Kind regards, Fritz Bauspiess, SAP NetWeaver Product Management Security