Solution Manager
自 2023 年 1 月以来共 4 条安全说明。
优先级依据 CVSS 推算,并非 SAP 的优先级:CVSS 9.0 及以上为严重,7.0 及以上为高,4.0 及以上为中,低于 4.0 为低。SAP 自己的优先级仅见于 SAP for Me(需要 SAP 登录)。
| 补丁日 | 编号 | 标题 | 优先级(依据 CVSS 推算,并非 SAP 的优先级) | CVSS |
|---|---|---|---|---|
| 2023年2月 | 3265846 | SAP Solution Manager (BSP Application) - version 720, allows an authenticated attacker to craft a malicious link, which when clicked by an unsuspecting user, can be used to read or modify some sensit… | 中 | 6.5 |
| 2023年2月 | 3267442 | SAP Solution Manager (BSP Application) - version 720, allows an authenticated attacker to craft a malicious link, which when clicked by an unsuspecting user, can be used to read or modify some sensit… | 中 | 6.5 |
| 2023年2月 | 3270509 | SAP Solution Manager - version 720, allows an authenticated attacker to redirect users to a malicious site due to insufficient URL validation. | 中 | 6.5 |
| 2023年2月 | 3266751 | SAP Solution Manager (System Monitoring) - version 720, does not sufficiently encode user-controlled inputs, resulting in Cross-Site Scripting (XSS) vulnerability. | 中 | 6.1 |