跳到正文
SecondTuesday

Solution Manager

自 2023 年 1 月以来共 4 条安全说明。

优先级依据 CVSS 推算,并非 SAP 的优先级:CVSS 9.0 及以上为严重,7.0 及以上为高,4.0 及以上为中,低于 4.0 为低。SAP 自己的优先级仅见于 SAP for Me(需要 SAP 登录)。

补丁日编号标题优先级(依据 CVSS 推算,并非 SAP 的优先级)CVSS
2023年2月3265846SAP Solution Manager (BSP Application) - version 720, allows an authenticated attacker to craft a malicious link, which when clicked by an unsuspecting user, can be used to read or modify some sensit… 中6.5
2023年2月3267442SAP Solution Manager (BSP Application) - version 720, allows an authenticated attacker to craft a malicious link, which when clicked by an unsuspecting user, can be used to read or modify some sensit… 中6.5
2023年2月3270509SAP Solution Manager - version 720, allows an authenticated attacker to redirect users to a malicious site due to insufficient URL validation. 中6.5
2023年2月3266751SAP Solution Manager (System Monitoring) - version 720, does not sufficiently encode user-controlled inputs, resulting in Cross-Site Scripting (XSS) vulnerability. 中6.1