Unrated severityNVD Advisory· Published Sep 9, 2020· Updated Aug 4, 2024
CVE-2020-6326
CVE-2020-6326
Description
SAP NetWeaver (Knowledge Management), version-7.30,7.31,7.40,7.50, allows an authenticated attacker to create malicious links in the UI, when clicked by victim, will execute arbitrary java scripts thus extracting or modifying information otherwise restricted leading to Stored Cross Site Scripting.
Affected products
2- Range: =7.30, 7.31, 7.40, 7.50
- SAP SE/SAP NetWeaver (Knowledge Management)v5Range: < 7.30
Patches
Vulnerability mechanics
References
2- launchpad.support.sap.commitrex_refsource_MISC
- wiki.scn.sap.com/wiki/pages/viewpage.actionmitrex_refsource_MISC
News mentions
0No linked articles in our index yet.