Skip to content
SecondTuesday

SAP Solution Manager

10 notes since January 2023.

Patch DayNoteTitlePriorityCVSS
December 20253685270Code Injection vulnerability in SAP Solution Manager Critical9.9
November 20253668705Code Injection vulnerability in SAP Solution Manager Critical9.9
April 20253558864Missing Authorization check in SAP Solution Manager Medium4.4
December 20233395306Command Injection vulnerability in SAP Solution Manager Medium6.4
July 20233352058Unauthenticated blind SSRF in SAP Solution Manager (Diagnostics agent) High7.2
July 20233348145Header Injection in SAP Solution Manager (Diagnostic Agent) High7.2
February 20233265846Cross Site Scripting in SAP Solution Manager (BSP Application) Medium6.5
February 20233267442Cross Site Scripting in SAP Solution Manager (BSP Application) Medium6.5
February 20233270509URL Redirection vulnerability in SAP Solution Manager Medium6.5
February 20233266751Cross-Site Scripting (XSS) vulnerability in SAP Solution Manager 7.2 Medium6.1