SAP SE SAP Solution Manager vulnerabilities

36 known vulnerabilities, 1 confirmed exploited in the wild (CISA KEV), 3 published in the last 12 months.

Exploited SAP SE SAP Solution Manager vulnerabilities

CVE-2020-6207 — SAP Solution Manager Missing Authentication for Critical Function Vulnerability

CVE-2025-42880 — Code Injection vulnerability in SAP Solution Manager (CVSS 9.9)
CVE-2025-42887 — Code Injection vulnerability in SAP Solution Manager (CVSS 9.9)
CVE-2025-30017 — Missing Authorization check in SAP Solution Manager (CVSS 4.4)
CVE-2023-49587 — Command Injection vulnerability in SAP Solution Manager (CVSS 6.4)
CVE-2023-36925 — Unauthenticated blind SSRF in SAP Solution Manager (Diagnostics agent) (CVSS 7.2)
CVE-2023-36921 — Header Injection in SAP Solution Manager (Diagnostic Agent) (CVSS 7.2)
CVE-2023-27893 — Arbitrary Code Execution in SAP Solution Manager and ABAP managed systems (ST-PI) (CVSS 8.8)
CVE-2023-23855 — (CVSS 5.4)
CVE-2023-23852 — (CVSS 6.1)
CVE-2023-0025 — (CVSS 5.4)
CVE-2023-0024 — (CVSS 5.4)
CVE-2022-41275 — (CVSS 6.1)
CVE-2022-41261 — (CVSS 5.5)
CVE-2022-22544 — (CVSS 9.1)
CVE-2021-21483 — (CVSS 4.9)
CVE-2020-26837 — (CVSS 9.1)
CVE-2020-26836 — (CVSS 6.1)
CVE-2020-26830 — (CVSS 8.1)
CVE-2020-26824 — (CVSS 10.0)
CVE-2020-26823 — (CVSS 10.0)
CVE-2020-26822 — (CVSS 10.0)
CVE-2020-26821 — (CVSS 10.0)
CVE-2020-6369 — (CVSS 5.9)
CVE-2020-6261 — (CVSS 5.3)
CVE-2020-6271 — (CVSS 8.2)