CVE-2017-15297: SAP Host Agent

High severity, CVSS 7.5. EPSS: 3% chance of exploitation in the next 30 days.

SAP Hostcontrol does not require authentication for the SOAP SAPControl endpoint. This is SAP Security Note 2442993.

Affected products

• SAP Host Agent: version 7.21 only

Published 2017-10-16. Last modified 2026-06-17.