CVE-2020-26821critical

CVE-2020-26821: critical vulnerability in SAP Solution Manager (JAVA stack)

Published · Updated

Follow this CVE+ Monitor SAP Solution Manager

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

28Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 10epss 1.4%
SAP Solution Manager (JAVA stack), version - 7.20, allows an unauthenticated attacker to compromise the system because of missing authorization checks in the SVG Converter Service, this has an impact to the integrity and availability of the service.
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:H
Affected products
SAP SE · SAP Solution Manager (JAVA stack)
Related CVEs — SAP Solution Manager (JAVA stack)

In the same product, most dangerous first.

CVE-2020-26823CRITICALCVE-2020-26823EPSS 1.3%CVE-2020-26824CRITICALCVE-2020-26824EPSS 1.3%CVE-2020-26822CRITICALCVE-2020-26822EPSS 1.3%