Many vulnerable SAP systems exposed to the internetERPScan has published a report which shows that many organisations using SAP-based systems have vulnerable unpatched services or services that allow logins with default credential, exposed to the internet
Source:
Many vulnerable SAP systems exposed to the internet