Diagnostics Agent vulnerabilities

2 known vulnerabilities in Diagnostics Agent from SAP. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.8 Critical severity

  Diagnostics Agent (EventLogServiceCollector): Missing Authentication for Critical Functionality

  CVE-2023-27497Apr 11, 2023SAP

  Due to missing authentication and input sanitization of code the EventLogServiceCollector of SAP Diagnostics Agent - version 720, allows an attacker to execute malicious scripts on all connected Diagnostics Agents running on Windows. On successful exploitation

• 8.1 High severity

  Diagnostics Agent (OSCommand Bridge): Missing Authentication for Critical Functionality

  CVE-2023-27267Apr 11, 2023SAPEPSS 14.2%

  Due to missing authentication and insufficient input validation, the OSCommand Bridge of SAP Diagnostics Agent - version 720, allows an attacker with deep knowledge of the system to execute scripts on all connected Diagnostics Agents. On successful exploitatio