SM
Product
Solution Manager
On CISA KEVExploited in the wild
33
CVEs
1
On KEV
10.0
Max CVSS
0
New 30D
Severity mix
Critical 8High 8Medium 14Low 1
Watch
Add Solution Manager to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2020-6207 In wildKEV | 9.8 | Mar 10 | SAP Solution Manager Missing Authentication for Critical Function Vulnerability Affected: 7.20 |
| CVE-2020-26824 | 10.0 | Nov 10 | SAP Solution Manager (JAVA stack), version - 7.20, allows an unauthenticated attacker to compromise the system because of missing authorization checks in the Upgrade Legacy Ports… Affected: 7.20 |
| CVE-2020-26823 | 10.0 | Nov 10 | SAP Solution Manager (JAVA stack), version - 7.20, allows an unauthenticated attacker to compromise the system because of missing authorization checks in the Upgrade Diagnostics… Affected: 7.20 |
| CVE-2020-26822 | 10.0 | Nov 10 | SAP Solution Manager (JAVA stack), version - 7.20, allows an unauthenticated attacker to compromise the system because of missing authorization checks in the Outside Discovery… Affected: 7.20 |
| CVE-2020-26821 | 10.0 | Nov 10 | SAP Solution Manager (JAVA stack), version - 7.20, allows an unauthenticated attacker to compromise the system because of missing authorization checks in the SVG Converter… Affected: 7.20 |
| CVE-2020-6198 | 9.8 | Mar 10 | SAP Solution Manager (Diagnostics Agent), version 720, allows unencrypted connections from unauthenticated sources Affected: 7.20 |
| CVE-2022-22544 | 9.1 | Feb 9 | Solution Manager (Diagnostics Root Cause Analysis Tools) - version 720, allows an administrator to execute code on all connected Diagnostics Agents and browse files on their… Affected: 7.20 |
| CVE-2020-26837 | 9.1 | Dec 9 | SAP Solution Manager 7.2 (User Experience Monitoring), version - 7.2, allows an authenticated user to upload a malicious script that can exploit an existing path traversal… Affected: 7.20 |
Showing 8