CVE-2023-27497

CVE-2023-27497 affects SAP Diagnostics Agent version 720, where the EventLogServiceCollector is vulnerable due to missing authentication and input sanitization. This allows an attacker to execute malicious scripts on all connected Diagnostics Agents on Windows, potentially compromising confidenti...

CVE-2023-27267

CVE-2023-27267 affects SAP Diagnostics Agent OSCommand Bridge (version 720). Root cause: lack of authentication and insufficient input validation allowing script execution across connected Diagnostics Agents. Impact: potential full confidentiality, integrity and availability compromise. Exploitat...