SAP SE SAP Solution Manager (Trace Analysis) vulnerabilities

3 vulnerabilities

Known vulnerabilities in SAP SE SAP Solution Manager (Trace Analysis), newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

6.1CVE-2020-26836sap sesap solution manager (trace analysis)+1
EPSS score
2.20%
SAP Solution Manager (Trace Analysis), version - 720, allows for misuse of a parameter in the application URL leading to Open Redirect vulnerability, an attacker can enter a link to malicious site which could trick the user to enter credentials or download malicious software, as a parameter in the application URL and share it with the end user who could potentially become a victim of the attack.5.3CVE-2020-6261sap sesap solution manager (trace analysis)+1
EPSS score
0.78%
SAP Solution Manager (Trace Analysis), version 7.20, allows an attacker to perform a log injection into the trace file, due to Incomplete XML Validation. The readability of the trace file is impaired.6.5CVE-2020-6260sap sesap solution manager (trace analysis)+1
EPSS score
0.78%
SAP Solution Manager (Trace Analysis), version 7.20, allows an attacker to inject superflous data that can be displayed by the application, due to Incomplete XML Validation. The application shows additional data that do not actually exist.