The vulnerabilities affect 9% of SAP's 440,000 customers, the Walldorf, Germany-based company said Monday in a statement. It plans to fix the problems in the second quarter to meet contractually agreed or statutory security standards. There are no known breaches or security incidents that have resulted from the shortcomings, which affect products from companies that SAP acquired, including SuccessFactors Inc., Concur Technologies Inc. and Callidus Software Inc.