SAP Solution Manager
6 notes since January 2023.
Priority is derived from CVSS, not SAP’s priority: CVSS 9.0 or higher is Critical, 7.0 or higher High, 4.0 or higher Medium, below 4.0 Low. SAP’s own priority is only on SAP for Me (SAP login required).
| Patch Day | Note | Title | Priority (derived from CVSS, not SAP’s priority) | CVSS |
|---|---|---|---|---|
| December 2025 | 3685270 | Code Injection vulnerability in SAP Solution Manager | Critical | 9.9 |
| November 2025 | 3668705 | Code Injection vulnerability in SAP Solution Manager | Critical | 9.9 |
| April 2025 | 3558864 | Missing Authorization check in SAP Solution Manager | Medium | 4.4 |
| December 2023 | 3395306 | Command Injection vulnerability in SAP Solution Manager | Medium | 6.4 |
| July 2023 | 3348145 | Header Injection in SAP Solution Manager (Diagnostic Agent) | High | 7.2 |
| July 2023 | 3352058 | Unauthenticated blind SSRF in SAP Solution Manager (Diagnostics agent) | High | 7.2 |