Approved changes feed: RSS · Atom

cpe:2.3:a:sap:diagnostics_agent_(eventlogservicecollector):*:*:*:*:*:*:*:*

part: a version: * update: *

VendorSap (dd5aa0c0-20b0-5c86-a937-aa29f1a33b77)
ProductDiagnostics Agent (Eventlogservicecollector) (dde54250-b196-58db-87ce-9f4cd47aeaa4)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2023-27497 vulnerable 2026-06-08 05:57:41.722697 Multiple vulnerabilities in SAP Diagnostics Agent (EventLogServiceCollector)
CRITICAL (10)
Due to missing authentication and input sanitization of code the EventLogServiceCollector of SAP Diagnostics Agent - version 720, allows an attacker to execute malicious scripts on all connected Diagnostics Agents running on Windows. On successful exploitation, the attacker can completely compromise confidentiality, integrity and availability of the system.
Published: 2023-04-11T02:37:07.584Z
Updated: 2025-02-07T19:32:25.313Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.