CVE-2020-6198: SAP Solution Manager

Critical severity, CVSS 9.8. EPSS: 1.4% chance of exploitation in the next 30 days.

SAP Solution Manager (Diagnostics Agent), version 720, allows unencrypted connections from unauthenticated sources. This allows an attacker to control all remote functions on the Agent due to Missing Authentication Check.

Affected products

• SAP Solution Manager: version 7.20 only

Published 2020-03-10. Last modified 2026-06-17.