VULNERABILITY INTELLIGENCE

CVE-2020-26823

CVSS score10 CRITICAL
EPSS probability1.30%
CISA KEVNot currently listed
Published2020-11-10
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:H

Description

SAP Solution Manager (JAVA stack), version - 7.20, allows an unauthenticated attacker to compromise the system because of missing authorization checks in the Upgrade Diagnostics Agent Connection Service, this has an impact to the integrity and availability of the service.

Weakness classification

  • nvd@nist.gov: CWE-306

Primary references