Solution Manager vulnerabilities
4 known vulnerabilities in Solution Manager from SAP. 4 are rated high or critical, and 1 has been exploited in real attacks. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
Latest first
- 7.2 High severity
SAP Solution Manager (Diagnostics agent): Server-Side Request Forgery
SAP Solution Manager (Diagnostics agent) - version 7.20, allows an unauthenticated attacker to blindly execute HTTP requests. On successful exploitation, the attacker can cause a limited impact on confidentiality and availability of the application and other a
- 7.2 High severity
SAP Solution Manager (Diagnostic Agent): Improper Encoding or Escaping of Output
SAP Solution Manager (Diagnostics agent) - version 7.20, allows an attacker to tamper with headers in a client request. This misleads SAP Diagnostics Agent to serve poisoned content to the server. On successful exploitation, the attacker can cause a limited im
- 8.8 High severity
Solution Manager and ABAP managed systems: Improper Control of Generation of Code
An attacker authenticated as a user with a non-administrative role and a common remote execution authorization in SAP Solution Manager and ABAP managed systems (ST-PI) - versions 2088_1_700, 2008_1_710, 740, can use a vulnerable interface to execute an applica
- 9.8 Critical severity
SAP Solution Manager Missing Authentication for Critical Function Exploited
SAP Solution Manager (User Experience Monitoring), version- 7.2, due to Missing Authentication Check does not perform any authentication for a service resulting in complete compromise of all SMDAgents connected to the Solution Manager.