6.5
CVSSv2

CVE-2020-26837

Published: 09/12/2020 Updated: 17/06/2021
CVSS v2 Base Score: 6.5 | Impact Score: 6.4 | Exploitability Score: 8
CVSS v3 Base Score: 9.1 | Impact Score: 5.3 | Exploitability Score: 3.1
VMScore: 580
Vector: AV:N/AC:L/Au:S/C:P/I:P/A:P

Vulnerability Summary

SAP Solution Manager 7.2 (User Experience Monitoring), version - 7.2, allows an authenticated user to upload a malicious script that can exploit an existing path traversal vulnerability to compromise confidentiality exposing elements of the file system, partially compromise integrity allowing the modification of some configurations and partially compromise availability by making certain services unavailable.

Vulnerability Trend

Vulnerable Product Search on Vulmon Subscribe to Product

sap solution manager 7.20

Mailing Lists

<!--X-Body-Begin--> <!--X-User-Header--> Full Disclosure mailing list archives <!--X-User-Header-End--> <!--X-TopPNI--> By Date By Thread </form> <!--X-TopPNI-End--> <!--X-MsgBody--> <!--X-Subject-Header-Begin--> Onapsis Security Advisory 2021-0010: File exfiltration and DoS in SolMan End-User Experience Monitoring <!--X-Subject- ...