SAP Solution Manager 740

Submit a proposal Propose CVE/GCVE/GHSA reference

Approved changes feed: RSS · Atom

cpe:2.3:a:sap:solution_manager:740:*:*:*:*:*:*:*

part: a version: 740 update: *

VendorSap (dd5aa0c0-20b0-5c86-a937-aa29f1a33b77)
ProductSolution Manager (9b54893a-67b5-5ed9-9cfa-383f4326042a)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2023-27893 vulnerable 2026-06-08 05:57:42.426711 Arbitrary Code Execution in SAP Solution Manager and ABAP managed systems (ST-PI)
HIGH (8.8)
An attacker authenticated as a user with a non-administrative role and a common remote execution authorization in SAP Solution Manager and ABAP managed systems (ST-PI) - versions 2088_1_700, 2008_1_710, 740, can use a vulnerable interface to execute an application function to perform actions which they would not normally be permitted to perform.  Depending on the function executed, the attack can read or modify any user or application data and can make the application unavailable.
Published: 2023-03-14T05:07:21.276Z
Updated: 2025-02-27T18:01:10.927Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-41275 vulnerable 2026-06-08 05:48:30.131084 Details available
MEDIUM (6.1)
In SAP Solution Manager (Enterprise Search) - versions 740, and 750, an unauthenticated attacker can generate a link that, if clicked by a logged-in user, can be redirected to a malicious page that could read or modify sensitive information, or expose the user to a phishing attack, with little impact on confidentiality and integrity.
Published: 2022-12-13T03:14:09.574Z
Updated: 2025-04-18T16:00:27.417Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.