SAP Solution Manager Missing Authorization Check Vulnerability Allowing File Upload

Vulnerability

A vulnerability exists in SAP Solution Manager 7.1 due to a missing authorization check, allowing authenticated attackers to upload files as templates for solution documentation. This exploitation could lead to a limited impact on the application's integrity and availability.

Impact

Exploitation of this vulnerability could cause a limited impact on the integrity and availability of the application.

Remediation

Users are advised to review and implement the SAP Security Note associated with this vulnerability. This can be done through the SAP for Me platform, specifically in the Security Notes section. For guidance on accessing and applying SAP Security Notes, refer to the SAP Security Notes FAQs.

Added: Jun 9, 2025, 7:46 PM
Updated: Jun 9, 2025, 7:46 PM

Vulnerability Rating

Custom Algorithm
spread
4.5
impact
7.5
exploitability
4.9
remediation
0.0
relevance
0.0
threat
0.0
urgency
2.9
incentive
1.7

Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.