CVE-2014-5175
HighSummary
The License Measurement servlet in SAP Solution Manager 7.1 allows remote attackers to bypass authentication via unspecified vectors, related to a verb tampering attack and SAP_JTECHS.
Risk Assessment
Bypassing authentication may lead to unauthorized access to the system, posing a serious threat to the organization's data security.
Recommendation
It is recommended to update SAP Solution Manager to the latest version and implement additional security measures to minimize the risk of attacks.
Other vulnerabilities in SAP Solution Manager 7.1
See all- CVE-2013-7363High
An unspecified vulnerability in the Diagnostics (SMD) agent in SAP Solution Manager allows remote attackers to obtain sensitive information, modify application configurations, and install or remove applications via vectors involving the P4 protocol.
- CVE-2020-6207CriticalActively exploited
SAP Solution Manager (User Experience Monitoring), version 7.2, due to Missing Authentication Check does not perform any authentication for a service resulting in complete compromise of all SMDAgents connected to the Solution Manager.
- CVE-2023-0025Medium
SAP Solution Manager (BSP Application) version 720 allows an authenticated attacker to craft a malicious link that, when clicked by an unsuspecting user, can be used to read or modify sensitive information or craft a payload that may restrict access to resources.
Original NVD description (English source)
The License Measurement servlet in SAP Solution Manager 7.1 allows remote attackers to bypass authentication via unspecified vectors, related to a verb tampering attack and SAP_JTECHS.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS