CVE-2023-36925
HIGHSAP Solution Manager 7.20 - Unauthenticated Server-Side Request Forgery
Title source: llmDescription
SAP Solution Manager (Diagnostics agent) - version 7.20, allows an unauthenticated attacker to blindly execute HTTP requests. On successful exploitation, the attacker can cause a limited impact on confidentiality and availability of the application and other applications the Diagnostics Agent can reach.
References (2)
Core 2
Core References
Permissions Required
https://me.sap.com/notes/3352058
Scores
CVSS v3
7.2
EPSS
0.0073
EPSS Percentile
72.9%
Attack Vector
NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:N/A:L
CISA SSVC
Vulnrichment
Exploitation
none
Automatable
yes
Technical Impact
partial
Details
CWE
CWE-918
Status
published
Products (1)
sap/solution_manager
7.20
Published
Jul 11, 2023
Tracked Since
Feb 18, 2026