CRITICAL🇵🇱 Wersja polska

CVE-2020-26821

CVSS 10.0v3.1pub. 2020-11-10upd. 2024-11-21

SAP Solution Manager (JAVA stack), version - 7.20, allows an unauthenticated attacker to compromise the system because of missing authorization checks in the SVG Converter Service, this has an impact to the integrity and availability of the service.

CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:H

  • Sap Solution Manager

    APP
    Sap
    7.20
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
Tags
Auth Bypass
CWE
References

Related vulnerabilities

CVE-2020-6207CRITICAL9.8⚠ KEVPL ✓same product

SAP Solution Manager 7.2 – brak uwierzytelnienia w module UX Monitoring

CVE-2022-22544CRITICAL9.1PL ✓same product

SAP Solution Manager: wykonanie kodu na podłączonych agentach przez administratora

CVE-2020-26837CRITICAL9.1PL ✓same product

SAP Solution Manager 7.2 – path traversal via upload złośliwego skryptu

CVE-2020-26824CRITICAL10.0PL ✓same product

SAP Solution Manager — brak autoryzacji w Upgrade Legacy Ports Service (RCE/DoS)

CVE-2020-26822CRITICAL10.0PL ✓same product

SAP Solution Manager – brak autoryzacji w Outside Discovery Configuration Service