CVE-2023-36925
HighCVSS 7.2Exploitation Probability (EPSS)
Low risk41th percentile - higher than 41% of all known CVEs
Summary
SAP Solution Manager (Diagnostics agent) version 7.20 allows an unauthenticated attacker to blindly execute HTTP requests. Upon successful exploitation, the attacker can impact the confidentiality and availability of the application and other applications the Diagnostics Agent can reach.
Risk Assessment
The organization may experience limited impact on the confidentiality and availability of systems, potentially leading to disruptions in application functionality.
Recommendation
It is recommended to update SAP Solution Manager to the latest version to mitigate the risks associated with this vulnerability.
Other vulnerabilities in SAP Solution Manager (Diagnostics agent) version 7.20
Original NVD description (English source)
SAP Solution Manager (Diagnostics agent) - version 7.20, allows an unauthenticated attacker to blindly execute HTTP requests. On successful exploitation, the attacker can cause a limited impact on confidentiality and availability of the application and other applications the Diagnostics Agent can reach.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS