For example, if you locate a memory corruption bug inside "a highly-privileged process," you could receive up to $85,000. Finding the same exploit in a sandboxed process has a maximum $55,000 reward.

SAP patched a dozen holes in its in-memory management system HANA that could have led to SQL injections, cross-site scripting (XSS) errors, and memory corruption vulnerabilities.