CVE-2020-6260: SAP Solution Manager

Medium severity, CVSS 5.3. EPSS: 0.8% chance of exploitation in the next 30 days.

SAP Solution Manager (Trace Analysis), version 7.20, allows an attacker to inject superflous data that can be displayed by the application, due to Incomplete XML Validation. The application shows additional data that do not actually exist.

Affected products

• SAP Solution Manager: version 7.20 only

Published 2020-06-10. Last modified 2026-06-17.