CVE Vulnerability Advisory Database

Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.

Reset
Showing 1โ€“1 of 1 advisories (Page 1/1)
CVE-2020-62079.8/CRITICALEPSS 98.1%CISA KEV
2020-03-10

SAP Solution Manager 7.2 Authentication Bypass and Remote Code Execution (RCE) Vulnerability (CVE-2020-6207) Security Advisory

[Affected Scope] All SMDAgents connected to SAP Solution Manager (User Experience Monitoring) version 7.2

[Impact] Unauthenticated attackers can compromise all connected SMDAgents and execute arbitrary remote commands with high privileges

[Mitigation] Immediately apply the official SAP security patch (SAP Note 2890213) and restrict network access to the Solution Manager ports

CVE Vulnerability Advisory Database (CVSS ยท CISA KEV ยท EPSS) | CVE Pulse