Loading
SAP Solution Manager (Diagnostics agent) - version 7.20, allows an unauthenticated attacker to blindly execute HTTP requests. On successful exploitation, the attacker can cause a limited impact on confidentiality and availability of the application and other applications the Diagnostics Agent can reach.
Use CWE-918, Sap vendor hub and Solution Manager product page to widen CVE-2023-36925 into its surrounding weakness, vendor, and product context.
Compare it with CVE-2022-22544, CVE-2023-27893 and CVE-2023-36921 for nearby disclosures in the same product family. Additional editorial context is available in The Weekly Cybersecurity Brief: February 13th, 2026.