SAP SE SAP Solution Manager vulnerabilities
8 vulnerabilities
Known vulnerabilities in SAP SE SAP Solution Manager, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
CVE-2018-2405sap_sesap solution manager+1
EPSS score0.92%
SAP Solution Manager, 7.10, 7.20, Incident Management Work Center allows an attacker to upload a malicious script as an attachment and this could lead to possible Cross-Site Scripting.CVE-2018-2361sap_sesap solution manager+1EPSS score1.24%
In SAP Solution Manager 7.20, the role SAP_BPO_CONFIG gives the Business Process Operations (BPO) configuration user more authorization than required for configuring the BPO tools.CVE-2021-21483sap_sesap solution manager+1EPSS score0.69%
Under certain conditions SAP Solution Manager, version - 720, allows a high privileged attacker to get access to sensitive information which has a direct serious impact beyond the exploitable component thereby affecting the confidentiality in the application.CVE-2025-42880sap_sesap solution managerEPSS score4.50%
Due to missing input sanitation, SAP Solution Manager allows an authenticated attacker to insert malicious code when calling a remote-enabled function module. This could provide the attacker with full control of the system hence leading to high impact on confidentiality, integrity and availability of the system.CVE-2025-42887sap_sesap solution managerEPSS score0.60%
Due to missing input sanitation, SAP Solution Manager allows an authenticated attacker to insert malicious code when calling a remote-enabled function module. This could provide the attacker with full control of the system hence leading to high impact on confidentiality, integrity and availability of the system.CVE-2025-30017sap_sesap solution managerEPSS score0.15%
Due to a missing authorization check, an authenticated attacker could upload a file as a template for solution documentation in SAP Solution Manager 7.1. After successful exploitation, an attacker can cause limited impact on the integrity and availability of the application.CVE-2019-0291sap_sesap solution manager+1EPSS score0.39%
Under certain conditions Solution Manager, version 7.2, allows an attacker to access information which would otherwise be restricted.CVE-2023-49587sap_sesap solution manager+1EPSS score0.41%
SAP Solution Manager - version 720, allows an authorized attacker to execute certain deprecated function modules which can read or modify data of same or other component without user interaction over the network.