Skip to content
OpenAdvisories
Medium · 5.4 CVE-2020-6326 EUVD-2020-27476GHSA-vp93-pr49-f4r2

SAP NetWeaver (Knowledge Management), version-7.30,7.31,7.40,7.50, allows an authenticated attacker to create malicious links in the UI, wh…

Published Sep 9, 2020 · Updated Aug 4, 2024 · Assigned by sap

Description

SAP NetWeaver (Knowledge Management), version-7.30,7.31,7.40,7.50, allows an authenticated attacker to create malicious links in the UI, when clicked by victim, will execute arbitrary java scripts thus extracting or modifying information otherwise restricted leading to Stored Cross Site Scripting.

Affected products

VendorProductAffectedFixed
SAP SE SAP NetWeaver (Knowledge Management) < 7.30, < 7.31, < 7.40, < 7.50 —

References