CVE-2023-36921— Header Injection in SAP Solution Manager (Diagnostic Agent)
Quick assessment
Affected
SAP_SE SAP Solution Manager (Diagnostic Agent)
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
SAP Solution Manager是德国思爱普（SAP）公司的一套集系统监控、SAP支持桌面、自助服务、ASAP实施等多个功能为一体的系统管理平台。该平台可以帮助客户建立SAP解决方案的生命周期管理，并提供系统监控、远程支持服务和SAP产品组件升级等功能。 SAP Solution Manager 存在安全漏洞，该漏洞源于可以篡改客户端请求中的标头。
Possible ATT&CK Techniques 1 AI
T1190 · Exploit Public-Facing Application
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2023-36921
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Header Injection in SAP Solution Manager (Diagnostic Agent)
Source: CVE Program / CVE List V5
Vulnerability Description
SAP Solution Manager (Diagnostics agent) - version 7.20, allows an attacker to tamper with headers in a client request. This misleads SAP Diagnostics Agent to serve poisoned content to the server. On successful exploitation, the attacker can cause a limited impact on confidentiality and availability of the application.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:N/A:L
Source: CVE Program / CVE List V5
Vulnerability Type
对HTTP头部进行脚本语法转义处理不恰当
Source: CVE Program / CVE List V5
Vulnerability Title
SAP Solution Manager 安全漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
SAP Solution Manager是德国思爱普（SAP）公司的一套集系统监控、SAP支持桌面、自助服务、ASAP实施等多个功能为一体的系统管理平台。该平台可以帮助客户建立SAP解决方案的生命周期管理，并提供系统监控、远程支持服务和SAP产品组件升级等功能。 SAP Solution Manager 存在安全漏洞，该漏洞源于可以篡改客户端请求中的标头。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| SAP_SE | SAP Solution Manager (Diagnostic Agent) | 7.20 | - |
|
II. Public POCs for CVE-2023-36921
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2023-36921
请登录查看更多情报信息。
Other References for CVE-2023-36921 (2)
Same Patch Batch · SAP_SE · 2023-07-11 · 18 CVEs total
| CVE-2023-36922 | 9.1 CRITICAL | OS command injection vulnerability in SAP ECC and SAP S/4HANA (IS-OIL) |
| CVE-2023-33989 | 8.7 HIGH | Directory Traversal vulnerability in SAP NetWeaver (BI CONT ADD ON) |
| CVE-2023-33987 | 8.6 HIGH | Request smuggling and request concatenation in SAP Web Dispatcher |
| CVE-2023-33990 | 7.8 HIGH | Denial of Service (DoS) vulnerability in SAP SQL Anywhere |
| CVE-2023-35871 | 7.7 HIGH | Memory Corruption vulnerability in SAP Web Dispatcher |
| CVE-2023-36925 | 7.2 HIGH | Unauthenticated blind SSRF in SAP Solution Manager (Diagnostics agent) |
| CVE-2023-35873 | 6.5 MEDIUM | Missing Authentication check in SAP NetWeaver Process Integration (Runtime Workbench) |
| CVE-2023-35872 | 6.5 MEDIUM | Missing Authentication check in SAP NetWeaver Process Integration (Message Display Tool) |
| CVE-2023-35870 | 6.3 MEDIUM | Improper Access Control in SAP S/4HANA (Manage Journal Entry Template) |
| CVE-2023-36918 | 6.1 MEDIUM | Cross-Site Scripting vulnerability in SAP Enable Now |
| CVE-2023-33988 | 6.1 MEDIUM | Cross-Site Scripting vulnerability in SAP Enable Now |
| CVE-2023-35874 | 6.0 MEDIUM | Improper authentication vulnerability in SAP NetWeaver AS ABAP and ABAP Platform |
| CVE-2023-36917 | 5.9 MEDIUM | Password Change rate limit bypass in SAP BusinessObjects Business Intelligence Platform |
| CVE-2023-31405 | 5.3 MEDIUM | Log Injection vulnerability in SAP NetWeaver AS for Java (Log Viewer) |
| CVE-2023-36919 | 5.3 MEDIUM | Information Disclosure in SAP Enable Now |
| CVE-2023-36924 | 4.9 MEDIUM | Log Injection vulnerability in SAP ERP Defense Forces and Public Security |
| CVE-2023-33992 | 4.5 MEDIUM | Missing Authorization Check in SAP Business Warehouse and SAP BW/4HANA |
IV. Related Vulnerabilities
Same vendor: SAP_SE
-
CVE-2026-76974
Information Disclosure vulnerability in SAP Fiori Launchpad -
CVE-2026-76977
Clickjacking vulnerability in SAPUI5(Frame Options Allowlist -
CVE-2026-76971
Server-Side Request Forgery in SAP Manufacturing Integration -
CVE-2026-76969
Credential disclosure in multitenant applications using SAP -
CVE-2026-76968
Information Disclosure vulnerability in SAP Web Dispatcher,
Same weakness: CWE-644
-
CVE-2026-67179
Genkit improper host header validation -
CVE-2026-66778
Multiple vulnerabilities in SAP Business AI Platform (Approu -
CVE-2026-72574
picocms Pico - Host Header Injection Enables Script Source H -
CVE-2026-0516
SonicWALL SonicOS 跨站脚本漏洞 -
CVE-2026-48061
Litestar: AllowedHostsMiddleware bypasses host validation vi
V. Comments for CVE-2023-36921
No comments yet