VULNERABILITY INTELLIGENCE

CVE-2020-6198

CVSS score9.8 CRITICAL
EPSS probability1.38%
CISA KEVNot currently listed
Published2020-03-10
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Description

SAP Solution Manager (Diagnostics Agent), version 720, allows unencrypted connections from unauthenticated sources. This allows an attacker to control all remote functions on the Agent due to Missing Authentication Check.

Weakness classification

  • nvd@nist.gov: CWE-306

Primary references