VYPR
← All advisories
High severity8.8NVD Advisory· Published Apr 14, 2020· Updated Jun 17, 2026

CVE-2020-6225

CVE-2020-6225

Description

SAP NetWeaver (Knowledge Management), versions (KMC-CM - 7.00, 7.01, 7.02, 7.30, 7.31, 7.40, 7.50 and KMC-WPC 7.30, 7.31, 7.40, 7.50), does not sufficiently validate path information provided by users, thus characters representing traverse to parent directory are passed through to the file APIs, allowing the attacker to overwrite, delete, or corrupt arbitrary files on the remote server, leading to Path Traversal.

Affected products

15
  • SAP/Netweaver Knowledge Management And Collaboration \(kmc Cm\)7 versions
    cpe:2.3:a:sap:netweaver_knowledge_management_and_collaboration_\(kmc-cm\):7.00:*:*:*:*:*:*:*+ 6 more
    • cpe:2.3:a:sap:netweaver_knowledge_management_and_collaboration_\(kmc-cm\):7.00:*:*:*:*:*:*:*
    • cpe:2.3:a:sap:netweaver_knowledge_management_and_collaboration_\(kmc-cm\):7.01:*:*:*:*:*:*:*
    • cpe:2.3:a:sap:netweaver_knowledge_management_and_collaboration_\(kmc-cm\):7.02:*:*:*:*:*:*:*
    • cpe:2.3:a:sap:netweaver_knowledge_management_and_collaboration_\(kmc-cm\):7.30:*:*:*:*:*:*:*
    • cpe:2.3:a:sap:netweaver_knowledge_management_and_collaboration_\(kmc-cm\):7.31:*:*:*:*:*:*:*
    • cpe:2.3:a:sap:netweaver_knowledge_management_and_collaboration_\(kmc-cm\):7.40:*:*:*:*:*:*:*
    • cpe:2.3:a:sap:netweaver_knowledge_management_and_collaboration_\(kmc-cm\):7.50:*:*:*:*:*:*:*
  • SAP/Netweaver Knowledge Management And Collaboration \(kmc Wpc\)4 versions
    cpe:2.3:a:sap:netweaver_knowledge_management_and_collaboration_\(kmc-wpc\):7.30:*:*:*:*:*:*:*+ 3 more
    • cpe:2.3:a:sap:netweaver_knowledge_management_and_collaboration_\(kmc-wpc\):7.30:*:*:*:*:*:*:*
    • cpe:2.3:a:sap:netweaver_knowledge_management_and_collaboration_\(kmc-wpc\):7.31:*:*:*:*:*:*:*
    • cpe:2.3:a:sap:netweaver_knowledge_management_and_collaboration_\(kmc-wpc\):7.40:*:*:*:*:*:*:*
    • cpe:2.3:a:sap:netweaver_knowledge_management_and_collaboration_\(kmc-wpc\):7.50:*:*:*:*:*:*:*
  • SAP/Netweaverllm-fuzzy
    Range: 7.00, 7.01, 7.02, 7.30, 7.31, 7.40, 7.50
  • SAP/Knowledge Managementllm-fuzzy
    Range: 7.00, 7.01, 7.02, 7.30, 7.31, 7.40, 7.50
  • SAP SE/SAP NetWeaver (Knowledge Management) (KMC-CM)v5
    Range: < 7.00
  • SAP SE/SAP NetWeaver (Knowledge Management) (KMC-WPC)v5
    Range: < 7.30

Patches

Vulnerability mechanics

References

2

News mentions

0

No linked articles in our index yet.