Lucene search
K

367 matches found

OSV
OSV
added 2022/12/12 10:15 p.m.5 views

CVE-2022-41261

SAP Solution Manager Diagnostic Agent - version 7.20, allows an authenticated attacker on Windows system to access a file containing sensitive data which can be used to access a configuration file which contains credentials to access other system files. Successful exploitation can make the attack...

5.5CVSS5.5AI score
Exploits0References2
Prion
Prion
added 2022/12/12 10:15 p.m.14 views

Improper access control

SAP Solution Manager Diagnostic Agent - version 7.20, allows an authenticated attacker on Windows system to access a file containing sensitive data which can be used to access a configuration file which contains credentials to access other system files. Successful exploitation can make the attack...

1.7CVSS5.4AI score0.00166EPSS
Exploits0References2Affected Software1
Vulnrichment
Vulnrichment
added 2022/12/12 9:24 p.m.5 views

CVE-2022-41261

SAP Solution Manager Diagnostic Agent - version 7.20, allows an authenticated attacker on Windows system to access a file containing sensitive data which can be used to access a configuration file which contains credentials to access other system files. Successful exploitation can make the attack...

6CVSS6.1AI score0.00166EPSS
Exploits0References2
Cvelist
Cvelist
added 2022/12/12 9:24 p.m.23 views

CVE-2022-41261

SAP Solution Manager Diagnostic Agent - version 7.20, allows an authenticated attacker on Windows system to access a file containing sensitive data which can be used to access a configuration file which contains credentials to access other system files. Successful exploitation can make the attack...

6CVSS6.1AI score0.00166EPSS
Exploits0References2
CVE
CVE
added 2022/12/12 9:24 p.m.57 views

CVE-2022-41261

CVE-2022-41261 concerns SAP Solution Manager (Diagnostic Agent) 7.20. An authenticated attacker on Windows can access a file containing sensitive data, which can be used to reach a configuration file with credentials to access other system files. Successful exploitation may grant access to files ...

6CVSS5.4AI score0.00166EPSS
Exploits0References2Affected Software1
CNNVD
CNNVD
added 2022/12/12 12:0 a.m.2 views

SAP Solution Manager 安全漏洞

SAP Solution Manager is a set of system monitoring, SAP support desktop, self-service, ASAP implementation and other functions of the German SAP company as one of the system management platform. The platform can help customers establish SAP solution lifecycle management, and provide system...

6CVSS5.8AI score0.00166EPSS
Exploits0References4
Positive Technologies
Positive Technologies
added 2022/12/12 12:0 a.m.3 views

PT-2022-6135 · Sap +1 · Sap Solution Manager +1

Name of the Vulnerable Software and Affected Versions: SAP Solution Manager Diagnostic Agent version 7.20 Description: The issue allows an authenticated attacker on a Windows system to access a file containing sensitive data, which can be used to access a configuration file containing credentials...

6CVSS5.3AI score0.00166EPSS
Exploits0References6
BDU FSTEC
BDU FSTEC
added 2022/04/13 12:0 a.m.5 views

The vulnerability of the Solution Manager Diagnostics (Root Cause Analysis) tool within the SAP Solution Manager software platform allows a perpetrator to enhance their privileges.

The vulnerability of the Solution Manager Diagnostics Root Cause Analysis tool within the SAP Solution Manager software platform is related to lack of access control mechanisms. Exploiting this vulnerability could allow an attacker to increase their privileges remotely...

9.1CVSS7.7AI score0.01277EPSS
Exploits0References6Affected Software1
CNVD
CNVD
added 2022/02/10 12:0 a.m.17 views

SAP Solution Manager has an unspecified vulnerability

SAP Solution Manager is a system management platform from SAP Germany that integrates system monitoring, SAP support desktops, self-service, ASAP implementation, etc. SAP Solution Manager has a security vulnerability that can be exploited by attackers to compromise vulnerable systems, including...

9.1CVSS1.9AI score0.01277EPSS
Exploits0References1
ATTACKERKB
ATTACKERKB
added 2022/02/09 11:15 p.m.5 views

CVE-2022-22544

Solution Manager Diagnostics Root Cause Analysis Tools - version 720, allows an administrator to execute code on all connected Diagnostics Agents and browse files on their systems. An attacker could thereby control the managed systems. It is considered that this is a missing segregation of duty f...

9.1CVSS7.5AI score0.01277EPSS
Exploits0References4Affected Software1
OSV
OSV
added 2022/02/09 11:15 p.m.3 views

CVE-2022-22544

Solution Manager Diagnostics Root Cause Analysis Tools - version 720, allows an administrator to execute code on all connected Diagnostics Agents and browse files on their systems. An attacker could thereby control the managed systems. It is considered that this is a missing segregation of duty f...

9.1CVSS6.1AI score0.01277EPSS
Exploits0References2
NVD
NVD
added 2022/02/09 11:15 p.m.19 views

CVE-2022-22544

Solution Manager Diagnostics Root Cause Analysis Tools - version 720, allows an administrator to execute code on all connected Diagnostics Agents and browse files on their systems. An attacker could thereby control the managed systems. It is considered that this is a missing segregation of duty f...

9.1CVSS0.01277EPSS
Exploits0References2
CVE
CVE
added 2022/02/09 10:5 p.m.92 views

CVE-2022-22544

SAP Solution Manager 720’s Diagnostics Root Cause Analysis Tool suffers from insufficient access control, enabling an administrator to execute code on all connected Diagnostics Agents and browse their files. This could allow an attacker with admin privileges to control managed systems, leading to...

9.1CVSS9.3AI score0.01277EPSS
Exploits0References2Affected Software1
Cvelist
Cvelist
added 2022/02/09 10:5 p.m.25 views

CVE-2022-22544

Solution Manager Diagnostics Root Cause Analysis Tools - version 720, allows an administrator to execute code on all connected Diagnostics Agents and browse files on their systems. An attacker could thereby control the managed systems. It is considered that this is a missing segregation of duty f...

9.5AI score0.01277EPSS
Exploits0References2
CNNVD
CNNVD
added 2022/02/08 12:0 a.m.3 views

SAP Solution Manager 安全漏洞

SAP Solution Manager is a system management platform from SAP Germany that integrates system monitoring, SAP support desktops, self-service, ASAP implementation, etc. SAP Solution Manager has a security vulnerability that can be exploited by attackers to compromise vulnerable systems, including...

9.1CVSS8.1AI score0.01277EPSS
Exploits0References5
Positive Technologies
Positive Technologies
added 2022/02/08 12:0 a.m.5 views

PT-2022-2173 · Sap · Sap Solution Manager

Name of the Vulnerable Software and Affected Versions: SAP Solution Manager version 720 Description: The issue is related to insufficient access control in the SAP Solution Manager Diagnostics Root Cause Analysis tool, allowing a remote attacker to elevate their privileges. This can enable an...

9.1CVSS9.3AI score0.01277EPSS
Exploits0References9
CISA KEV Catalog
CISA KEV Catalog
added 2021/11/03 12:0 a.m.26 views

SAP Solution Manager Missing Authentication for Critical Function Vulnerability

SAP Solution Manager User Experience Monitoring contains a missing authentication for critical function vulnerability which results in complete compromise of all SMDAgents connected to the Solution Manager...

10CVSS9AI score0.98376EPSS
In wildExploits7
Packet Storm
Packet Storm
added 2021/06/15 12:0 a.m.194 views

SAP Solution Manager 7.2 (ST 720) Open Redirection

Onapsis Security Advisory 2021-0005: SAP Solution Manager Open Redirect from Trace Analysis Impact on Business Under certain circumstances, an attacker might be able to steal a cookie from the application. It may impact the confidentiality of the service. Advisory Information - Public Release Dat...

5.8CVSS5.3AI score0.02338EPSS
Exploits1
CNVD
CNVD
added 2021/04/30 12:0 a.m.5 views

SAP Solution Manager Information Disclosure Vulnerability

SAP Solution Manager is a set of system monitoring, SAP support desktop, self-service, ASAP implementation and other functions of the German SAP company as one of the system management platform. The platform can help customers establish SAP solution lifecycle management, and provide system...

8.2CVSS6.4AI score0.00694EPSS
Exploits0References1
BDU FSTEC
BDU FSTEC
added 2021/04/21 12:0 a.m.4 views

The vulnerability of the User Experience Monitoring component of the SAP Solution Manager platform allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the User Experience Monitoring component of the SAP Solution Manager software platform is related to the lack of authentication for critical functions. Exploiting this vulnerability could allow a malicious actor to compromise the confidentiality, integrity, and accessibility ...

10CVSS8.1AI score0.98376EPSS
Exploits7References5Affected Software1
Rows per page
Query Builder