SM
Product
Solution Manager
On CISA KEVExploited in the wild
33
CVEs
1
On KEV
10.0
Max CVSS
0
New 30D
Severity mix
Critical 8High 8Medium 14Low 1
Watch
Add Solution Manager to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2023-27893 | 8.8 | Mar 14 | An attacker authenticated as a user with a non-administrative role and a common remote execution authorization in SAP Solution Manager and ABAP managed systems (ST-PI) - versions… Affected: 740 |
| CVE-2018-2361 | 8.8 | Jan 9 | In SAP Solution Manager 7.20, the role SAP_BPO_CONFIG gives the Business Process Operations (BPO) configuration user more authorization than required for configuring the BPO tools Affected: 7.20 |
| CVE-2020-6235 | 8.6 | Apr 14 | SAP Solution Manager (Diagnostics Agent), version 7.2, does not perform the authentication check for the functionalities of the Collector Simulator, leading to Missing… Affected: 7.2 |
| CVE-2020-6271 | 8.2 | Jun 10 | SAP Solution Manager (Problem Context Manager), version 7.2, does not perform the necessary authentication, allowing an attacker to consume large amounts of memory, causing the… Affected: 7.2 |
| CVE-2020-26830 | 8.1 | Dec 9 | SAP Solution Manager 7.2 (User Experience Monitoring), version - 7.2, does not perform necessary authorization checks for an authenticated user Affected: 7.20 |
| CVE-2016-10005 | 7.5 | Dec 19 | Webdynpro in SAP Solman 7.1 through 7.31 allows remote attackers to obtain sensitive information via webdynpro/dispatcher/sap.com/caf~eu~gp~example~timeoff~wd requests, aka SAP… Affected: 7.1; 7.1; 7.1; 7.1; 7.1; 7.20; +3 more |
| CVE-2023-36925 | 7.2 | Jul 11 | SAP Solution Manager (Diagnostics agent) - version 7.20, allows an unauthenticated attacker to blindly execute HTTP requests Affected: 7.20 |
| CVE-2023-36921 | 7.2 | Jul 11 | SAP Solution Manager (Diagnostics agent) - version 7.20, allows an attacker to tamper with headers in a client request Affected: 7.20 |
Showing 8