Support for Windows XP; Windows 2003 Server; Windows Vista; Windows 2008 Server; Windows 7 and Office 2010; Built with Visual Studio 2008[4]
7.30
June 2012
15
July 15, 2015
Usability enhancements; new customization features; built with Visual Studio 2010
7.40
October 2014
19
November 9, 2019
Replaces Corbu with Blue Crystal; integrates SAP GUI for Windows 7.40 and Netweaver Business Client 5.0
7.50
May 2017
15 (final)
April 9, 2019
7.60
February 2019
15
April 12, 2022
Introduces Belize theme, aligning GUI's visual design with the rest of SAP's Fiori applications. Retires Enjoy / Streamline / Tradeshow / SystemDependent themes.
7.70
January 29, 2021
16
April 09, 2024
8.00
January 27, 2023
12
January 12, 2027
The 64bit version; Quartz themes: Modernization of rendering engine and some additional features; HTML Control based on Microsoft Edge: Improvements; Usability improvements in many components; Improvements for SAP Logon; Branding images per system and client
Java releases – for other operating systems
Release
Release date
Latest patch
7.10
October 31, 2007
11
7.20
December 22, 2009
10
7.30
December 10, 2012
10
7.40
December 5, 2014
13
7.50
August 14, 2017
15
7.70
March 16, 2021
9
7.80
September 19, 2022
10
8.10
October 14, 2024
4
Single sign-on
SAP GUI on Microsoft Windows or Internet Explorer can also be used for single sign-on. There are several portal-based authentication applications for single sign-on. SAP GUI can have single sign-on with SAP Logon Ticket as well. Single sign-on also works in the Java GUI.[5]
Criticism of using SAP GUI for authentication to SAP server access
SAP is a distributed application, where client software (SAP GUI) installed on a user's workstation is used to access the central SAP server remotely over the company's network. Users need to authenticate themselves when accessing SAP. By default, however, SAP uses unencrypted communication, which allows potential company-internal attackers to get access to usernames and passwords by listening on the network. This can expose the complete SAP system, if a person is able to get access to this information for a user with extended authorization in the SAP system. Information about this feature is publicly accessible on the Internet.
SAP Secure Network Communications
SAP offers an option to strongly protect communication between clients and servers, called Secure Network Communications (SNC).[6]
Security
In total, the vendor has released 25 security patches (aka SAP Security Notes). One of the most notorious vulnerabilities was closed among the set of fixes released in March 2017. The vulnerability in the SAP GUI client for Windows allows remote code execution.[7] Also, researchers who identified the security issues pointed out that the vulnerability allows an attacker to download ransomware on the SAP server that would be automatically installed on every workstation within a company.[8]
Screen editing with Personas
Since 1998 SAP GUI screens (so-called "DynPros") can be adjusted and customized with GuiXT. Now this can also be achieved with "SAP Screen Personas". Personas is installed on one of the SAP NetWeaver ABAP 7.0x or 7.3x servers in the system landscape. Then it can be used on all SAP NetWeaver ABAP servers with a kernel of 7.21 or higher, including on NetWeaver ABAP 7.11 systems (on which Personas cannot be installed directly).
iOS and Android implementations
Native iOS and Android implementations of SAP GUI are available from GuiXT.
