CVE-2020-6261: SAP Solution Manager (Trace Analysis), version 7.20, allows an attacker to perform a log injection into the trace file, due to Incomplete XML Validation. The…

medium5.3CVSS 3.1

AVNACLPRNUINSUCNILAN

SAP Solution Manager (Trace Analysis), version 7.20, allows an attacker to perform a log injection into the trace file, due to Incomplete XML Validation. The readability of the trace file is impaired.

Affected

2 ranges

Vendor	Product	Version range	Fixed in
sap	solution_manager	—	—
sap_se	sap_solution_manager	< 7.20	7.20