Skip to content
OpenAdvisories

Product · SAP

SAP Solution Manager

8 known vulnerabilities.

SAP Solution Manager at a glance

Last 12 months
1
Critical · all time
2
Exploited · all time
0
Public exploit · all time
0
New vulnerabilities per month · last 12 months
0 1 1 December 2025: 1 vulnerability, 1 critical Dec 2025 January 2026: 0 vulnerabilities February 2026: 0 vulnerabilities March 2026: 0 vulnerabilities Mar April 2026: 0 vulnerabilities May 2026: 0 vulnerabilities June 2026: 0 vulnerabilities Jun July 2026: 0 vulnerabilities August 2026: 0 vulnerabilities September 2026: 0 vulnerabilities Sep October 2026: 0 vulnerabilities November 2026: 0 vulnerabilities
Show as table
MonthVulnerabilitiesCritical
Nov 202600
Oct 202600
Sep 202600
Aug 202600
Jul 202600
Jun 202600
May 202600
Apr 202600
Mar 202600
Feb 202600
Jan 202600
Dec 202511
Nov 202511
Oct 202500
Sep 202500
Aug 202500
Jul 202500
Jun 202500
May 202500
Apr 202510
Mar 202500
Feb 202500
Jan 202500
Dec 202400
All Critical High Medium Low Exploited only Public exploit

8 results · Feed

  • Critical 9.9
    CVE-2025-42880

    Code Injection vulnerability in SAP Solution Manager

    Due to missing input sanitation, SAP Solution Manager allows an authenticated attacker to insert malicious code when calling a remote-enabled function module. This could provide the attacker with full control of the system hence leading to high impact on conf…

    SAP SAP Solution Manager
  • Critical 9.9
    CVE-2025-42887

    Code Injection vulnerability in SAP Solution Manager

    Due to missing input sanitation, SAP Solution Manager allows an authenticated attacker to insert malicious code when calling a remote-enabled function module. This could provide the attacker with full control of the system hence leading to high impact on conf…

    SAP SAP Solution Manager
  • Medium 4.4
    CVE-2025-30017

    Missing Authorization check in SAP Solution Manager

    Due to a missing authorization check, an authenticated attacker could upload a file as a template for solution documentation in SAP Solution Manager 7.1. After successful exploitation, an attacker can cause limited impact on the integrity and availability of …

    SAP SAP Solution Manager
  • Medium 6.4
    CVE-2023-49587

    Command Injection vulnerability in SAP Solution Manager

    SAP Solution Manager - version 720, allows an authorized attacker to execute certain deprecated function modules which can read or modify data of same or other component without user interaction over the network.

    SAP SAP Solution Manager
  • High 8.2
    CVE-2021-21483

    Under certain conditions SAP Solution Manager, version - 720, allows a high privileged attacker to get access to sensit…

    SAP SAP Solution Manager
  • Unscored —
    CVE-2019-0291

    Under certain conditions Solution Manager, version 7.2, allows an attacker to access information which would otherwise …

    SAP SAP Solution Manager
  • Medium 5.4
    CVE-2018-2405

    SAP Solution Manager, 7.10, 7.20, Incident Management Work Center allows an attacker to upload a malicious script as an…

    SAP SAP Solution Manager
  • Unscored —
    CVE-2018-2361

    In SAP Solution Manager 7.20, the role SAP_BPO_CONFIG gives the Business Process Operations (BPO) configuration user mo…

    SAP SAP Solution Manager