VYPR
← All advisories
Medium severity6.5NVD Advisory· Published Aug 12, 2020· Updated Jun 17, 2026

CVE-2020-6293

CVE-2020-6293

Description

SAP NetWeaver (Knowledge Management), versions - 7.30, 7.31, 7.40, 7.50, allows an unauthenticated attacker to upload a malicious file and also to access, modify or make unavailable existing files but the impact is limited to the files themselves and is restricted by other policies such as access control lists and other upload file size restrictions, leading to Unrestricted File Upload.

Affected products

7
  • SAP/Netweaver Knowledge Management4 versions
    cpe:2.3:a:sap:netweaver_knowledge_management:7.30:*:*:*:*:*:*:*+ 3 more
    • cpe:2.3:a:sap:netweaver_knowledge_management:7.30:*:*:*:*:*:*:*
    • cpe:2.3:a:sap:netweaver_knowledge_management:7.31:*:*:*:*:*:*:*
    • cpe:2.3:a:sap:netweaver_knowledge_management:7.40:*:*:*:*:*:*:*
    • cpe:2.3:a:sap:netweaver_knowledge_management:7.50:*:*:*:*:*:*:*
  • SAP/Netweaverllm-fuzzy
    Range: 7.30, 7.31, 7.40, 7.50
  • SAP/Knowledge Managementllm-fuzzy
    Range: 7.30, 7.31, 7.40, 7.50
  • SAP SE/SAP NetWeaver (Knowledge Management)v5
    Range: < 7.30

Patches

Vulnerability mechanics

References

2

News mentions

0

No linked articles in our index yet.