SAP SE SAP Solution Manager (Diagnostics Agent) vulnerabilities

3 vulnerabilities

Known vulnerabilities in SAP SE SAP Solution Manager (Diagnostics Agent), newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

9.8CVE-2020-6198sap_sesap solution manager (diagnostics agent)+1
EPSS score
1.38%
SAP Solution Manager (Diagnostics Agent), version 720, allows unencrypted connections from unauthenticated sources. This allows an attacker to control all remote functions on the Agent due to Missing Authentication Check.8.6CVE-2020-6235sap_sesap solution manager (diagnostics agent)+1
EPSS score
1.64%
SAP Solution Manager (Diagnostics Agent), version 7.2, does not perform the authentication check for the functionalities of the Collector Simulator, leading to Missing Authentication.7.2CVE-2023-36925sap_sesap solution manager (diagnostics agent)+1
EPSS score
0.65%
SAP Solution Manager (Diagnostics agent) - version 7.20, allows an unauthenticated attacker to blindly execute HTTP requests. On successful exploitation, the attacker can cause a limited impact on confidentiality and availability of the application and other applications the Diagnostics Agent can reach.