Loading
SAP Solution Manager (Diagnostics agent) - version 7.20, allows an attacker to tamper with headers in a client request. This misleads SAP Diagnostics Agent to serve poisoned content to the server. On successful exploitation, the attacker can cause a limited impact on confidentiality and availability of the application.
Use CWE-644, Sap vendor hub and Solution Manager product page to widen CVE-2023-36921 into its surrounding weakness, vendor, and product context.
Compare it with CVE-2022-22544, CVE-2023-27893 and CVE-2023-36925 for nearby disclosures in the same product family. Additional editorial context is available in The Weekly Cybersecurity Brief: February 13th, 2026.