CVE-2023-36921

Name of the Vulnerable Software and Affected Versions SAP Solution Manager (Diagnostics agent) version 7.20

Description The issue is related to a lack of output encoding or escaping mechanism in the SAP Solution Manager (Diagnostics agent) platform. This can be exploited by a remote attacker to conduct a cross-site scripting (XSS) attack. The vulnerability allows an attacker to tamper with headers in a client request, misleading the SAP Diagnostics Agent to serve poisoned content to the server, which can impact the confidentiality and availability of the application.

Recommendations For SAP Solution Manager (Diagnostics agent) version 7.20, update the software to a version that includes a fix for the output encoding or escaping mechanism issue to prevent cross-site scripting (XSS) attacks.