CVE-2018-2405

SAP Solution Manager, 7.10, 7.20, Incident Management Work Center allows an attacker to upload a malicious script as an attachment and this could lead to possible Cross-Site Scripting...

CVE-2018-2405

SAP Solution Manager, Incident Management Work Center, versions 7.10 and 7.20, is vulnerable to a cross-site scripting flaw caused by insufficient filtering when uploading an attachment. An attacker could upload a malicious script as an attachment and have it execute in a user’s browser. Root cau...

SAP Solution Manager Privilege Bypass Vulnerability

SAP Solution Manager is a set of system monitoring, SAP support desktop, self-service, ASAP implementation and other functions of the German SAP company as one of the system management platform. The platform can help customers establish SAP solution lifecycle management, and provide system...

CVE-2018-2361

In SAP Solution Manager 7.20, the role SAPBPOCONFIG gives the Business Process Operations BPO configuration user more authorization than required for configuring the BPO tools...

Authorization

In SAP Solution Manager 7.20, the role SAPBPOCONFIG gives the Business Process Operations BPO configuration user more authorization than required for configuring the BPO tools...

CVE-2018-2361

In SAP Solution Manager 7.20, the role SAPBPOCONFIG gives the Business Process Operations BPO configuration user more authorization than required for configuring the BPO tools...

CVE-2018-2361

In SAP Solution Manager 7.20, the SAP_BPO_CONFIG role grants the Business Process Operations (BPO) configuration user more authorization than required for configuring BPO tools, creating a privilege-bypass condition. Multiple sources corroborate a privilege-elevation risk leading potentially to u...

CVE-2018-2361

In SAP Solution Manager 7.20, the role SAPBPOCONFIG gives the Business Process Operations BPO configuration user more authorization than required for configuring the BPO tools...

CVE-2016-10005

Webdynpro in SAP Solman 7.1 through 7.31 allows remote attackers to obtain sensitive information via webdynpro/dispatcher/sap.com/cafeugpexampletimeoffwd requests, aka SAP Security Note 2344524...

SAP Solman Information Disclosure Vulnerability

SAP NetWeaver Application Server AS Java is an application server that runs in NetWeaver and is based on the Java programming language.SolMan is not just for SAP components, but also includes complete customer solutions. An information disclosure vulnerability exists in SAP Solman. This...

SAP Solution Manager Remote Command Injection Vulnerability

SAP Solution Manager is a system management platform that integrates multiple functions such as system monitoring, SAP Support Desktop, self-service, and ASAP implementation. A remote command injection vulnerability exists in SAP Solution Manager, which allows attackers to exploit the vulnerabili...

CVE-2014-5175

The License Measurement servlet in SAP Solution Manager 7.1 allows remote attackers to bypass authentication via unspecified vectors, related to a verb tampering attack and SAPJTECHS...

Authentication flaw

The License Measurement servlet in SAP Solution Manager 7.1 allows remote attackers to bypass authentication via unspecified vectors, related to a verb tampering attack and SAPJTECHS...

CVE-2014-5175

The License Measurement servlet in SAP Solution Manager 7.1 allows remote attackers to bypass authentication via unspecified vectors, related to a verb tampering attack and SAPJTECHS...

CVE-2014-5175

CVE-2014-5175 affects SAP Solution Manager 7.1, specifically the License Measurement servlet, where remote attackers may bypass authentication via unspecified vectors related to a verb tampering attack and SAP_JTECHS. The available sources identify the affected product and the attack class but do...

CVE-2014-3131

SAP Profile Maintenance does not properly restrict access, which allows remote authenticated users to obtain sensitive information via an unspecified RFC function, related to SAP Solution Manager 7.1...

CVE-2014-3129

The Java Server Pages in the Software Lifecycle Manager SLM in SAP NetWeaver allows remote attackers to obtain sensitive information via a crafted request, related to SAP Solution Manager 7.1...

Code injection

SAP Background Processing does not properly restrict access, which allows remote authenticated users to obtain sensitive information via an unspecified RFC function, related to SAP Solution Manager 7.1...

Code injection

SAP Profile Maintenance does not properly restrict access, which allows remote authenticated users to obtain sensitive information via an unspecified RFC function, related to SAP Solution Manager 7.1...

CVE-2014-3131

CVE-2014-3131 affects SAP Solution Manager 7.1 through SAP Profile Maintenance, where access rights are not properly restricted. This allows remote authenticated users to obtain sensitive information via an unspecified RFC function. The available records indicate the vulnerability stems from inad...