Sap Se Sap Solution Manager vulnerabilities

CVE-2020-6260 [MEDIUM] CWE-91 CVE-2020-6260: SAP Solution Manager (Trace Analysis), version 7.20, allows an attacker to inject superflous data th SAP Solution Manager (Trace Analysis), version 7.20, allows an attacker to inject superflous data that can be displayed by the application, due to Incomplete XML Validation. The application shows additional data that do not actually exist.

CVE-2018-2405 [MEDIUM] CWE-79 CVE-2018-2405: SAP Solution Manager, 7.10, 7.20, Incident Management Work Center allows an attacker to upload a mal SAP Solution Manager, 7.10, 7.20, Incident Management Work Center allows an attacker to upload a malicious script as an attachment and this could lead to possible Cross-Site Scripting.

CVE-2019-0291 [MEDIUM] CVE-2019-0291: Under certain conditions Solution Manager, version 7.2, allows an attacker to access information whi Under certain conditions Solution Manager, version 7.2, allows an attacker to access information which would otherwise be restricted.

CVE-2021-21483 [MEDIUM] CVE-2021-21483: Under certain conditions SAP Solution Manager, version - 720, allows a high privileged attacker to g Under certain conditions SAP Solution Manager, version - 720, allows a high privileged attacker to get access to sensitive information which has a direct serious impact beyond the exploitable component thereby affecting the confidentiality in the application.

CVE-2025-30017 [MEDIUM] CWE-862 CVE-2025-30017: Due to a missing authorization check, an authenticated attacker could upload a file as a template fo Due to a missing authorization check, an authenticated attacker could upload a file as a template for solution documentation in SAP Solution Manager 7.1. After successful exploitation, an attacker can cause limited impact on the integrity and availability of the application.