CVE-2020-6207

Known Exploited (CISA KEV)CRITICAL

9.8

CVSS Severity Score

EPSS Score48.1750%

EPSS Percentile88.86th

Published2020年3月10日

Last Modified2025年10月31日

Vulnerability Description

SAP Solution Manager (User Experience Monitoring), version- 7.2, due to Missing Authentication Check does not perform any authentication for a service resulting in complete compromise of all SMDAgents connected to the Solution Manager.

Affected Platforms (CPE)

📦

Sap

Solution Manager

= 7.20

References & Advisories

🔗 http://packetstormsecurity.com/files/161993/SAP-Solution-Manager-7.2-Remote-Command-Execution.html

🔗 http://packetstormsecurity.com/files/162083/SAP-SMD-Agent-Unauthenticated-Remote-Code-Execution.html

🔗 http://packetstormsecurity.com/files/163168/SAP-Solution-Manager-7.20-Missing-Authorization.html

🔗 http://seclists.org/fulldisclosure/2021/Apr/4

🔗 http://seclists.org/fulldisclosure/2021/Jun/34

🔗 https://launchpad.support.sap.com/#/notes/2890213

🔗 https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=540935305

🔗 http://packetstormsecurity.com/files/161993/SAP-Solution-Manager-7.2-Remote-Command-Execution.html

Vulnerability Description

Affected Platforms (CPE)

Solution Manager

References & Advisories

関連する脆弱性情報