Skip to content
CVE PROGRAM SOURCE RECORD7.2 High

CVE-2023-36925

Unauthenticated blind SSRF in SAP Solution Manager (Diagnostics agent)

Description

SAP Solution Manager (Diagnostics agent) - version 7.20, allows an unauthenticated attacker to blindly execute HTTP requests. On successful exploitation, the attacker can cause a limited impact on confidentiality and availability of the application and other applications the Diagnostics Agent can reach.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

SAP_SE SAP Solution Manager (Diagnostics agent)

Default version status: unaffected

  • 7.20affected

References