CVE-2020-26823: SAP Solution Manager

Critical severity, CVSS 10.0. EPSS: 1.3% chance of exploitation in the next 30 days.

SAP Solution Manager (JAVA stack), version - 7.20, allows an unauthenticated attacker to compromise the system because of missing authorization checks in the Upgrade Diagnostics Agent Connection Service, this has an impact to the integrity and availability of the service.

Affected products

• SAP Solution Manager: version 7.20 only

Published 2020-11-10. Last modified 2026-06-17.