CVE-2013-7363
HighSummary
An unspecified vulnerability in the Diagnostics (SMD) agent in SAP Solution Manager allows remote attackers to obtain sensitive information, modify application configurations, and install or remove applications via vectors involving the P4 protocol.
Risk Assessment
This vulnerability may lead to the disclosure of confidential data and unauthorized changes to system configurations, posing a serious threat to the integrity and security of applications.
Recommendation
It is recommended to update to the latest version of SAP Solution Manager and monitor access to diagnostic agents to minimize risk.
Other vulnerabilities in SAP Solution Manager
See all- CVE-2014-5175High
The License Measurement servlet in SAP Solution Manager 7.1 allows remote attackers to bypass authentication via unspecified vectors, related to a verb tampering attack and SAP_JTECHS.
- CVE-2020-6207CriticalActively exploited
SAP Solution Manager (User Experience Monitoring), version 7.2, due to Missing Authentication Check does not perform any authentication for a service resulting in complete compromise of all SMDAgents connected to the Solution Manager.
- CVE-2023-0025Medium
SAP Solution Manager (BSP Application) version 720 allows an authenticated attacker to craft a malicious link that, when clicked by an unsuspecting user, can be used to read or modify sensitive information or craft a payload that may restrict access to resources.
Original NVD description (English source)
Unspecified vulnerability in the Diagnostics (SMD) agent in SAP Solution Manager allows remote attackers to obtain sensitive information, modify the configuration of applications, and install or remove applications via vectors involving the P4 protocol.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS