SAP Solution Manager vulnerabilities
4 known CVE vulnerabilities in SAP Solution Manager, translated and rated.
- CVE-2014-5175High
The License Measurement servlet in SAP Solution Manager 7.1 allows remote attackers to bypass authentication via unspecified vectors, related to a verb tampering attack and SAP_JTECHS.
- CVE-2013-7363High
An unspecified vulnerability in the Diagnostics (SMD) agent in SAP Solution Manager allows remote attackers to obtain sensitive information, modify application configurations, and install or remove applications via vectors involving the P4 protocol.
- CVE-2020-6207CriticalActively exploited
SAP Solution Manager (User Experience Monitoring), version 7.2, due to Missing Authentication Check does not perform any authentication for a service resulting in complete compromise of all SMDAgents connected to the Solution Manager.
- CVE-2023-0025Medium
SAP Solution Manager (BSP Application) version 720 allows an authenticated attacker to craft a malicious link that, when clicked by an unsuspecting user, can be used to read or modify sensitive information or craft a payload that may restrict access to resources.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS