Skip to content
Sap Solution Manager vulnerabilities
-
sap solution manager
Command Injection vulnerability in SAP Solution Manager
CVE-2023-49587
6.4 Medium
-
sap solution manager, sap se solution manager (diagnostics agent) +1 more
Unauthenticated blind SSRF in SAP Solution Manager (Diagnostics agent)
CVE-2023-36925
7.2 High
-
sap solution manager, sap se solution manager (diagnostic agent) +1 more
Header Injection in SAP Solution Manager (Diagnostic Agent)
CVE-2023-36921
7.2 High
-
sap solution manager and abap managed systems, solution manager +1 more
Arbitrary Code Execution in SAP Solution Manager and ABAP managed systems (ST-PI)
CVE-2023-27893
8.8 High
-
sap solution manager
SAP Solution Manager - version 720, allows an authenticated attacker to redirect users to a...
CVE-2023-23855
6.5 Medium
-
sap solution manager
SAP Solution Manager (System Monitoring) - version 720, does not sufficiently encode user...
CVE-2023-23852
6.1 Medium
-
sap solution manager (bsp application), solution manager +1 more
SAP Solution Manager (BSP Application) - version 720, allows an authenticated attacker to craft a...
CVE-2023-0025
6.5 Medium
-
sap solution manager (bsp application), solution manager +1 more
SAP Solution Manager (BSP Application) - version 720, allows an authenticated attacker to craft a...
CVE-2023-0024
6.5 Medium
-
sap solution manager (enterprise search), solution manager +1 more
In SAP Solution Manager (Enterprise Search) - versions 740, and 750, an unauthenticated attacker...
CVE-2022-41275
6.1 Medium
-
sap solution manager (diagnostic agent), solution manager +1 more
SAP Solution Manager (Diagnostic Agent) - version 7.20, allows an authenticated attacker on...
CVE-2022-41261
6.0 Medium
-
sap solution manager, sap se solution manager (diagnostics root cause analysis tools) +1 more
Solution Manager (Diagnostics Root Cause Analysis Tools) - version 720, allows an administrator...
CVE-2022-22544
9.1 Critical
-
sap solution manager
Under certain conditions SAP Solution Manager, version - 720, allows a high privileged attacker...
CVE-2021-21483
8.2 High
-
sap solution manager, sap se solution manager (trace analysis) +1 more
SAP Solution Manager (Trace Analysis), version - 720, allows for misuse of a parameter in the...
CVE-2020-26836
3.4 Low
-
sap solution manager, sap se solution manager (user experience monitoring) +1 more
SAP Solution Manager 7.2 (User Experience Monitoring), version - 7.2, allows an authenticated...
CVE-2020-26837
8.5 High
-
sap solution manager, sap se solution manager (user experience monitoring) +1 more
SAP Solution Manager 7.2 (User Experience Monitoring), version - 7.2, does not perform necessary...
CVE-2020-26830
7.6 High
-
sap solution manager, sap se solution manager (java stack) +1 more
SAP Solution Manager (JAVA stack), version - 7.20, allows an unauthenticated attacker to...
CVE-2020-26823
10.0 Critical
-
sap solution manager, sap se solution manager (java stack) +1 more
SAP Solution Manager (JAVA stack), version - 7.20, allows an unauthenticated attacker to...
CVE-2020-26821
10.0 Critical
-
sap solution manager, sap se solution manager (java stack) +1 more
SAP Solution Manager (JAVA stack), version - 7.20, allows an unauthenticated attacker to...
CVE-2020-26824
10.0 Critical
-
sap solution manager, sap se solution manager (java stack) +1 more
SAP Solution Manager (JAVA stack), version - 7.20, allows an unauthenticated attacker to...
CVE-2020-26822
10.0 Critical
-
sap focused run, solution manager, sap se ca introscope enterprise manager (affected products: sap solution manager and sap focused run) +2 more
SAP Solution Manager and SAP Focused Run (update provided in WILY_INTRO_ENTERPRISE 9.7, 10.1, 10...
CVE-2020-6369
7.5 High
-
sap solution manager, sap se solution manager (trace analysis) +1 more
SAP Solution Manager (Trace Analysis), version 7.20, allows an attacker to perform a log...
CVE-2020-6261
5.3 Medium
-
sap solution manager, sap se solution manager (trace analysis) +1 more
SAP Solution Manager (Trace Analysis), version 7.20, allows an attacker to inject superflous data...
CVE-2020-6260
6.5 Medium
-
sap solution manager, sap se solution manager (problem context manager) +1 more
SAP Solution Manager (Problem Context Manager), version 7.2, does not perform the necessary...
CVE-2020-6271
8.2 High
-
sap solution manager, sap se solution manager (diagnostics agent) +1 more
SAP Solution Manager (Diagnostics Agent), version 7.2, does not perform the authentication check...
CVE-2020-6235
8.6 High
-
sap solution manager, sap se solution manager (user experience monitoring) +1 more
SAP Solution Manager (User Experience Monitoring), version- 7.2, due to Missing Authentication...
CVE-2020-6207
In KEVPublic exploit
EPSS 98.1%
10.0 Critical
-
sap solution manager, sap se solution manager (diagnostics agent) +1 more
SAP Solution Manager (Diagnostics Agent), version 720, allows unencrypted connections from...
CVE-2020-6198
9.8 Critical
-
sap solution manager, sap se solution manager(diagnostics agent) +1 more
Diagnostics Agent in Solution Manager, version 7.2, stores several credentials such as SLD user...
CVE-2019-0307
2.4 Low
-
sap solution manager system, sap se solution manager system (st-pi) +1 more
Read of RFC destination does not always perform necessary authorization checks, resulting in...
CVE-2019-0293
6.5 Medium
-
sap solution manager
Under certain conditions Solution Manager, version 7.2, allows an attacker to access information...
CVE-2019-0291
5.5 Medium
-
sap solution manager
SAP Solution Manager, 7.10, 7.20, Incident Management Work Center allows an attacker to upload a...
CVE-2018-2405
5.4 Medium
-
sap solution manager
In SAP Solution Manager 7.20, the role SAP_BPO_CONFIG gives the Business Process Operations (BPO)...
CVE-2018-2361
8.8 High
-
sap solution manager
Webdynpro in SAP Solman 7.1 through 7.31 allows remote attackers to obtain sensitive information...
CVE-2016-10005
7.5 High
-
sap solution manager
The License Measurement servlet in SAP Solution Manager 7.1 allows remote attackers to bypass...
CVE-2014-5175
7.5 High
-
sap solution manager
Unspecified vulnerability in the Diagnostics (SMD) agent in SAP Solution Manager allows remote...
CVE-2013-7363
7.5 High
-
sap netweaver, netweaver solution manager +1 more
The Solution Manager in SAP NetWeaver does not properly restrict access, which allows remote...
CVE-2014-1960
5.0 Medium