VYPR
← All advisories
Medium severity5.4NVD Advisory· Published Sep 9, 2020· Updated Jun 17, 2026

CVE-2020-6326

CVE-2020-6326

Description

SAP NetWeaver (Knowledge Management), version-7.30,7.31,7.40,7.50, allows an authenticated attacker to create malicious links in the UI, when clicked by victim, will execute arbitrary java scripts thus extracting or modifying information otherwise restricted leading to Stored Cross Site Scripting.

Affected products

6
  • SAP/Netweaver Knowledge Management4 versions
    cpe:2.3:a:sap:netweaver_knowledge_management:7.30:*:*:*:*:*:*:*+ 3 more
    • cpe:2.3:a:sap:netweaver_knowledge_management:7.30:*:*:*:*:*:*:*
    • cpe:2.3:a:sap:netweaver_knowledge_management:7.31:*:*:*:*:*:*:*
    • cpe:2.3:a:sap:netweaver_knowledge_management:7.40:*:*:*:*:*:*:*
    • cpe:2.3:a:sap:netweaver_knowledge_management:7.50:*:*:*:*:*:*:*
  • SAP/Netweaverllm-fuzzy
    Range: 7.30,7.31,7.40,7.50
  • SAP SE/SAP NetWeaver (Knowledge Management)v5
    Range: < 7.30

Patches

Vulnerability mechanics

References

2

News mentions

0

No linked articles in our index yet.