CVE-2020-6192

CVE-2020-6192 affects SAP Landscape Management, version 3.0. The vulnerability allows an attacker with admin privileges to run malicious commands with root privileges on the SAP Host Agent via SAP Landscape Management. CNVD cites an input validation error as the underlying issue; other sources re...

CVE-2024-39593

SAP Landscape Management is affected by an information-disclosure vulnerability where an authenticated user can read confidential data exposed by the REST Provider Definition response. The issue is reported across multiple feeds (NVD, Red Hat, CVE lists) and is described as high impact to confide...

CVE-2020-6191

CVE-2020-6191 describes a vulnerability in SAP Landscape Management 3.0 where an attacker with admin privileges can cause the SAP Host Agent to execute arbitrary code with root privileges due to Missing Input Validation. The connected sources (NVD, Red Hat, CNVD, CNVD-like entries, and related no...

CVE-2019-0380

CVE-2019-0380 affects SAP Landscape Management enterprise edition prior to 3.0. The vulnerability arises when default values of custom secure parameters are included in application logs, causing information disclosure. The description and multiple sources corroborate a log-based exposure in SAP L...

CVE-2019-0249

SAP Landscape Management (VCM 3.0) contains an information-disclosure vulnerability that could allow an attacker to access restricted data under certain conditions. The CVE entry documents an exposure but does not provide concrete exploit vectors, affected versions beyond VCM 3.0, or remediation ...

CVE-2020-6236

CVE-2020-6236 affects SAP Landscape Management v3.0 and SAP Adaptive Extensions v1.0. An attacker with admin_group privileges can remotely change ownership and permissions (including S-user ID bit) of arbitrary files, enabling execution of those files as root from a non-root context and causing p...

CVE-2019-0261

CVE-2019-0261 affects SAP HANA XS Advanced: improper authentication checks for XS Advanced platform and business users. Root cause described as authentication bypass in XS Advanced; fixed in SAP HANA 1/2 SPS0 as part of 1.0.97–1.0.99. The issue carried high risk with CVSS v3 base score 9.8 (NETWO...

CVE-2023-26458

The CVE affects SAP Landscape Management (enterprise edition) 3.0. An authenticated SAP Landscape Management user can access the Diagnostics Agent connection via Java SCS Message Server on a Solution Manager system and escalate to obtain privileged access on other systems, leading to information ...