CVE-2020-268363.4LowCWE-601

CVE-2020-26836: SAP Solution Manager - Open Redirect

SAP SE · SAP Solution Manager (Trace Analysis)

Affected: SAP SE SAP Solution Manager (Trace Analysis) · Exploitation: check available, not yet exploited

Not in CyberSIXT coverage yet: no article names this CVE. This page shows the public record.

2.2%probability of exploitation in the next 30 days

82nd percentile

050100

Higher than 82% of scored CVEs

3.4LowCVSS 3.0

LowMediumHighCrit.

DescriptionCVE.org

SAP Solution Manager (Trace Analysis), version - 720, allows for misuse of a parameter in the application URL leading to Open Redirect vulnerability, an attacker can enter a link to malicious site which could trick the user to enter credentials or download malicious software, as a parameter in the application URL and share it with the end user who could potentially become a victim of the attack.

Affected products1

From the CVE record. A product or version that is not listed is unknown, not unaffected.

SAP SE · SAP Solution Manager (Trace Analysis)< 720

On the Atlas

Every published CVE is on the CyberSIXT Atlas, grouped by weakness, vendor and month.

Open the Atlas

Exploitation: Check available, not yet exploited. A public nuclei template can confirm it on a system you are authorised to test.
CISA KEV: Not listed
Public check: SAP Solution Manager - Open Redirect · nuclei template in projectdiscovery/nuclei-templates
Weakness: Open Redirect
Vendor: SAP SE
Published: December 2020
Band: Check available, not yet exploited, December 2020

CoverageNo articles yet

No CyberSIXT article names CVE-2020-26836 yet, so there is no coverage timeline, action brief or change log for it. Everything on this page comes from the public CVE record, CISA KEV, EPSS and the nuclei template index. Search the archive or see the CVEs in the news.