Multiple vulnerabilities in SAP Diagnostics Agent (EventLogServiceCollector)
28Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackcvss 10epss 0.8%
probabilidade de exploração
0.8%top 47% das CVEs
exploração observada
nãonenhuma fonte reporta
Due to missing authentication and input sanitization of code the EventLogServiceCollector of SAP Diagnostics Agent - version 720, allows an attacker to execute malicious scripts on all connected Diagnostics Agents running on Windows. On successful exploitation, the attacker can completely compromise confidentiality, integrity and availability of the system.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
Produtos afetados
SAP · Diagnostics Agent (EventLogServiceCollector)