← Back to browse · API

CVE-2020-26822

Severity
CRITICAL
CVSS
10.0
EPSS
0.013
Risk score
40.45
CISA KEV
No
PoC
No
Published
2020-11-10
Modified
2024-08-04
First seen
2026-08-07
Aliases
EUVD-2020-19358, GHSA-MC9W-C56J-233F
Products
SAP SE:SAP Solution Manager (JAVA stack) < 7.20
Sources
euvd EUVD-2020-19358

Description

SAP Solution Manager (JAVA stack), version - 7.20, allows an unauthenticated attacker to compromise the system because of missing authorization checks in the Outside Discovery Configuration Service, this has an impact to the integrity and availability of the service.

References