8.1
CVSSv3

CVE-2023-27267

Published: 11/04/2023 Updated: 14/04/2023
CVSS v3 Base Score: 8.1 | Impact Score: 5.9 | Exploitability Score: 2.2
VMScore: 0

Vulnerability Summary

Due to missing authentication and insufficient input validation, the OSCommand Bridge of SAP Diagnostics Agent - version 720, allows an attacker with deep knowledge of the system to execute scripts on all connected Diagnostics Agents. On successful exploitation, the attacker can completely compromise confidentiality, integrity and availability of the system.

Vulnerability Trend

Vulnerable Product Search on Vulmon Subscribe to Product

sap diagnostics agent 720