CVE Feed

    Dashboard / CVE / CVE-2023-26458

    CVE-2023-26458

    An information disclosure vulnerability exists in SAP Landscape Management - version 3.0, enterprise edition. It allows an authenticated SAP Landscape Management user to obtain privileged access to other systems making those other systems vulnerable to information disclosure and modification.The disclosed information is for Diagnostics Agent Connection via Java SCS Message Server of an SAP Solution Manager system and can only be accessed by authenticated SAP Landscape Management users, but they can escalate their privileges to the SAP Solution Manager system.

    Published:Apr 11, 2023
    Last Modified:Feb 7, 2025
    EPS:Apr 11, 2023
    EPSS Score:0.00146
    CVSS Score:6.8

    Affected Products

    Vendor
    Sap
    Product
    Landscape Management

    Exploits

    No exploit reference

    Common Attack Pattern Enumeration and Classification (CAPEC)

    No CAPEC recorded yet

    Related CVEs

    CVE-2024-39593 (CVSS 6.9) — SAP Landscape Management allows an authenticated user to read confidential data disclosed by the REST Provider…
    CVE-2020-6236 (CVSS 7.2) — SAP Landscape Management, version 3.0, and SAP Adaptive Extensions, version 1.0, allows an attacker with admin…
    CVE-2020-6191 (CVSS 7.2) — SAP Landscape Management, version 3.0, allows an attacker with admin privileges to execute malicious executabl…
    CVE-2020-6192 (CVSS 7.2) — SAP Landscape Management, version 3.0, allows an attacker with admin privileges to execute malicious commands …
    CVE-2019-0380 (CVSS 4.9) — Under certain conditions, SAP Landscape Management enterprise edition, before version 3.0, allows custom secur…
    CVE-2019-0261 (CVSS 9.8) — Under certain circumstances, SAP HANA Extended Application Services, advanced model (XS advanced) does not per…
    CVE-2019-0249 (CVSS 7.5) — Under certain conditions SAP Landscape Management (VCM 3.0) allows an attacker to access information which wou…

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High