Critical severity10.0NVD Advisory· Published Nov 10, 2020· Updated Jun 17, 2026
CVE-2020-26821
CVE-2020-26821
Description
SAP Solution Manager (JAVA stack), version - 7.20, allows an unauthenticated attacker to compromise the system because of missing authorization checks in the SVG Converter Service, this has an impact to the integrity and availability of the service.
Affected products
3- SAP SE/SAP Solution Manager (JAVA stack)v5Range: < 7.20
- cpe:2.3:a:sap:solution_manager:7.20:*:*:*:*:*:*:*
- Range: =7.20
Patches
Vulnerability mechanics
References
2- launchpad.support.sap.comnvdPermissions RequiredVendor Advisory
- wiki.scn.sap.com/wiki/pages/viewpage.actionnvdVendor Advisory
News mentions
0No linked articles in our index yet.