sap solution manager 720 vulnerabilities and exploits

(subscribe to this query)

6.4

CVSSv3

SAP Solution Manager - version 720, allows an authorized malicious user to execute certain deprecated function modules which can read or modify data of same or other component without user interaction over the network.

Sap Solution Manager 720

5.4

CVSSv3

SAP Solution Manager (BSP Application) - version 720, allows an authenticated malicious user to craft a malicious link, which when clicked by an unsuspecting user, can be used to read or modify some sensitive information or craft a payload which may restrict access to the desired...

Sap Solution Manager 720

6.1

CVSSv3

SAP Solution Manager (System Monitoring) - version 720, does not sufficiently encode user-controlled inputs, resulting in Cross-Site Scripting (XSS) vulnerability.

Sap Solution Manager 720

5.4

CVSSv3

SAP Solution Manager - version 720, allows an authenticated malicious user to redirect users to a malicious site due to insufficient URL validation. A successful attack could lead an malicious user to read or modify the information or expose the user to a phishing attack. As a re...

Sap Solution Manager 720

5.4

CVSSv3

SAP Solution Manager (BSP Application) - version 720, allows an authenticated malicious user to craft a malicious link, which when clicked by an unsuspecting user, can be used to read or modify some sensitive information or craft a payload which may restrict access to the desired...

Sap Solution Manager 720

9.1

CVSSv3

Solution Manager (Diagnostics Root Cause Analysis Tools) - version 720, allows an administrator to execute code on all connected Diagnostics Agents and browse files on their systems. An attacker could thereby control the managed systems. It is considered that this is a missing se...

Sap Solution Manager 7.20

4.9

CVSSv3

Under certain conditions SAP Solution Manager, version - 720, allows a high privileged malicious user to get access to sensitive information which has a direct serious impact beyond the exploitable component thereby affecting the confidentiality in the application.

Sap Solution Manager 7.20

6.1

CVSSv3

SAP Solution Manager (Trace Analysis), version - 720, allows for misuse of a parameter in the application URL leading to Open Redirect vulnerability, an attacker can enter a link to malicious site which could trick the user to enter credentials or download malicious software, as ...

Sap Solution Manager 7.20

9.8

CVSSv3

SAP Solution Manager (Diagnostics Agent), version 720, allows unencrypted connections from unauthenticated sources. This allows an malicious user to control all remote functions on the Agent due to Missing Authentication Check.

Sap Solution Manager 7.20

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook