CVE-2020-26823

SAP Solution Manager JAVA stack, version - 7.20, allows an unauthenticated attacker to compromise the system because of missing authorization checks in the Upgrade Diagnostics Agent Connection Service, this has an impact to the integrity and availability of the service...

CVE-2020-26823: Missing Authentication for Critical Function

SAP Solution Manager JAVA stack, version - 7.20, allows an unauthenticated attacker to compromise the system because of missing authorization checks in the Upgrade Diagnostics Agent Connection Service, this has an impact to the integrity and availability of the service...

PT-2020-16508

Name of the Vulnerable Software and Affected Versions SAP Solution Manager JAVA stack version 7.20 Description The issue allows an unauthenticated attacker to compromise the system due to missing authorization checks in the Upgrade Diagnostics Agent Connection Service. This has an impact on the...

SAP Solution Manager Authorization Issues Vulnerability (CNVD-2020-25979)

SAP Solution Manager is a set of system monitoring, SAP support desktop, self-service, ASAP implementation and other functions of the German SAP company as one of the system management platform. The platform can help customers establish SAP solution lifecycle management, and provide system...

CVE-2020-6235

SAP Solution Manager Diagnostics Agent, version 7.2, does not perform the authentication check for the functionalities of the Collector Simulator, leading to Missing Authentication...

CVE-2020-6235

SAP Solution Manager Diagnostics Agent, version 7.2, does not perform the authentication check for the functionalities of the Collector Simulator, leading to Missing Authentication...

CVE-2020-6235

CVE-2020-6235 affects SAP Solution Manager (Diagnostics Agent) 7.2, where the Collector Simulator lacks authentication checks, causing Missing Authentication. Multiple sources (NVD, Red Hat, CNVD, CVE lists) describe this issue with network-facing exposure and potential high impact on confidentia...

PT-2020-19032

Name of the Vulnerable Software and Affected Versions SAP Solution Manager Diagnostics Agent version 7.2 Description The issue is related to missing authentication in the Collector Simulator functionalities. This occurs because the authentication check is not performed, allowing unauthorized...

CVE-2020-6235: Missing Authentication for Critical Function

SAP Solution Manager Diagnostics Agent, version 7.2, does not perform the authentication check for the functionalities of the Collector Simulator, leading to Missing Authentication...

SAP Solution Manager Authorization Issues Vulnerability

SAP Solution Manager is a set of system monitoring, SAP support desktop, self-service, ASAP implementation and other functions of the German SAP company as one of the system management platform. The platform can help customers establish SAP solution lifecycle management, and provide system...

CVE-2020-6198

SAP Solution Manager Diagnostics Agent, version 720, allows unencrypted connections from unauthenticated sources. This allows an attacker to control all remote functions on the Agent due to Missing Authentication Check...

CVE-2020-6198

SAP Solution Manager Diagnostics Agent, version 720, allows unencrypted connections from unauthenticated sources. This allows an attacker to control all remote functions on the Agent due to Missing Authentication Check...

CVE-2020-6198

SAP Solution Manager Diagnostics Agent, version 720, allows unencrypted connections from unauthenticated sources. This allows an attacker to control all remote functions on the Agent due to Missing Authentication Check...

CVE-2020-6198

CVE-2020-6198 affects SAP Solution Manager (Diagnostics Agent), Version 720. Root cause: Missing authentication allows unencrypted connections from unauthenticated sources, enabling an attacker to remotely control all agent functions. Documents cite high/critical impact (CVSS v3.1 base score 9.8)...

PT-2020-6763

Name of the Vulnerable Software and Affected Versions SAP Solution Manager Diagnostics Agent version 720 Description The issue is related to the transmission of data in an open format, allowing an attacker to gain unauthorized access to protected information. This is due to a missing authenticati...

CVE-2020-6198: Missing Authentication for Critical Function

SAP Solution Manager Diagnostics Agent, version 720, allows unencrypted connections from unauthenticated sources. This allows an attacker to control all remote functions on the Agent due to Missing Authentication Check...

SAP Diagnostics Agent Information Disclosure Vulnerability

SAP Diagnostics Agent is a system diagnostic agent program from SAP. An information disclosure vulnerability exists in SAP Diagnostics Agent. The vulnerability arises from a configuration or other error in the operation of a networked system or product. An attacker could exploit this vulnerabilit...

SAP Diagnostics Agent CVE-2019-0390 Information Disclosure Vulnerability

Description SAP Diagnostics Agent is prone to an unspecified information-disclosure vulnerability. Attackers can exploit this issue to obtain sensitive information that may aid in launching further attacks. SAP Diagnostic Agent LM-Service version 7.20 is vulnerable; other versions may also be...

SAP Diagnostics Agent OS Command Injection Vulnerability

SAP Diagnostics Agent is a system diagnostic agent program from SAP. An operating system command injection vulnerability exists in SAP Diagnostic Agent LM-Service version 7.2. An attacker could exploit this vulnerability to inject code and take control of the application...

SAP Diagnostics Agent CVE-2019-0330 OS Command Injection Vulnerability

Description SAP Diagnostics Agent is prone to an OS command-injection vulnerability because it fails to properly sanitize user-supplied input. An attacker may exploit this issue to inject and execute arbitrary commands within the context of the affected application; this may aid in further attack...