What’s Vulnerable › Vulnerabilities

CVE-2023-49587: Command Injection vulnerability in SAP Solution Manager

• Severity: medium (CVSS 6.4 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.4% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2023-12-12 · updated 2026-06-17
• Weakness: CWE-77

Description

SAP Solution Manager - version 720, allows an authorized attacker to execute certain deprecated function modules which can read or modify data of same or other component without user interaction over the network.

Affected products

• SAP SE SAP Solution Manager: 720

References

• https://me.sap.com/notes/3395306
• https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html
• https://me.sap.com/notes/3395306
• https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html

Get alerted when CVE-2023-49587 or the next vulnerability affects your stack