sap solution manager

Name: sap solution manager
Brand: sap

productUS

cpe:2.3:a:sap:solution_manager:*:*:*:*:*:*:*:*

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

by severity

8critical10high14medium1low

updated 2026-10-28

vulnerabilities (33)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2020-6207US	critical9.8OT critical	98.1% (100th)	KEV	no fix	2020-03-10	= 7.20
CVE-2019-0307US	low2.4OT elevated	2.05% (81st)	Exploit	no fix	2019-06-12	= 7.2
CVE-2020-6369US	medium5.9OT elevated	2.67% (86th)	—	no fix	2020-10-20	4 versions
CVE-2016-10005US	high7.5	2.42% (84th)	—	no fix	2016-12-19	3 versions
CVE-2020-26836US	medium6.1	2.20% (82nd)	—	no fix	2020-12-09	= 7.20
CVE-2014-5175US	high7.5	1.96% (80th)	—	no fix	2014-07-31	= 7.1
CVE-2020-26837US	critical9.1	1.90% (80th)	—	no fix	2020-12-09	= 7.20
CVE-2020-6235US	high8.6OT elevated	1.64% (76th)	—	no fix	2020-04-14	= 7.2
CVE-2013-7363US	high7.5	1.53% (75th)	—	no fix	2014-04-10	—
CVE-2020-26830US	high8.1OT elevated	1.45% (73rd)	—	no fix	2020-12-09	= 7.20
CVE-2022-22544US	critical9.1	1.40% (72nd)	—	no fix	2022-02-09	= 7.20
CVE-2020-6198US	critical9.8OT elevated	1.38% (72nd)	—	no fix	2020-03-10	= 7.20
CVE-2020-26821US	critical10.0OT elevated	1.36% (72nd)	—	no fix	2020-11-10	= 7.20
CVE-2020-26824US	critical10.0OT elevated	1.30% (70th)	—	no fix	2020-11-10	= 7.20
CVE-2020-26823US	critical10.0OT elevated	1.30% (70th)	—	no fix	2020-11-10	= 7.20
CVE-2020-26822US	critical10.0OT elevated	1.30% (70th)	—	no fix	2020-11-10	= 7.20
CVE-2018-2361US	high8.8OT elevated	1.24% (69th)	—	no fix	2018-01-09	= 7.20
CVE-2023-27893US	high8.8	1.18% (68th)	—	no fix	2023-03-14	= 740
CVE-2020-6271US	high8.2	1.16% (67th)	—	no fix	2020-06-10	= 7.2
CVE-2018-2405US	medium5.4	0.92% (60th)	—	no fix	2018-04-10	2 versions
CVE-2020-6261US	medium5.3	0.78% (56th)	—	no fix	2020-07-01	= 7.20
CVE-2020-6260US	medium5.3	0.78% (56th)	—	no fix	2020-06-10	= 7.20
CVE-2021-21483US	medium4.9	0.69% (53rd)	—	no fix	2021-04-13	= 7.20
CVE-2023-36921US	high7.2	0.66% (52nd)	—	no fix	2023-07-11	= 7.20
CVE-2023-36925US	high7.2	0.65% (51st)	—	no fix	2023-07-11	= 7.20
CVE-2022-41275US	medium6.1	0.49% (42nd)	—	no fix	2022-12-13	2 versions
CVE-2023-23852US	medium6.1	0.42% (36th)	—	no fix	2023-02-14	= 720
CVE-2023-49587US	medium6.4	0.41% (35th)	—	no fix	2023-12-12	= 720
CVE-2019-0291US	medium5.5	0.39% (33rd)	—	no fix	2019-05-14	= 7.2
CVE-2023-0024US	medium5.4	0.39% (32nd)	—	no fix	2023-02-14	= 720
CVE-2023-0025US	medium5.4	0.34% (28th)	—	no fix	2023-02-14	= 720
CVE-2023-23855US	medium5.4	0.30% (23rd)	—	no fix	2023-02-14	= 720
CVE-2022-41261US	medium5.5	0.17% (7th)	—	no fix	2022-12-12	= 7.20

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-306Missing Authentication for Critical Function7 CVEs
CWE-79Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')4 CVEs
CWE-200Exposure of Sensitive Information to an Unauthorized Actor3 CVEs
CWE-601URL Redirection to Untrusted Site ('Open Redirect')3 CVEs
CWE-116Improper Encoding or Escaping of Output2 CVEs
CWE-284Improper Access Control2 CVEs
CWE-287Improper Authentication2 CVEs
CWE-91XML Injection (aka Blind XPath Injection)2 CVEs

sources (1)

Which sources assert this record, and when.

USNVD / CVE33 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan