CVE-2023-49587CWE-77

Command Injection vulnerability in SAP Solution Manager

Medium · published December 12, 2023

CVSS v3.1
6.4
EPSS
0%
Percentile
33.9
In the wild
Unconfirmed
What it is

SAP Solution Manager - version 720, allows an authorized attacker to execute certain deprecated function modules which can read or modify data of same or other component without user interaction over the network.

The record
Technical detail
CVSS v3.1
6.4 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N
CVSS v4.0
Not supplied
EPSS
0.00408 · 33.9th percentile
Weakness
CWE-77 · Improper Neutralization of Special Elements used in a Command ('Command Injection')
Published
2023-12-12T01:35Z
EPSS history
Timeline
  • 12 DEC 01:35Z
    Command Injection vulnerability in SAP Solution Manager
    cvelistv5