CVE-2020-6293 HIGH

CVE-2020-6293

Vendor Sap Se
Product SAP NetWeaver (Knowledge Management)
Published August 12, 2020
Last update August 4, 2024

CVSS base score

7.3/10
Attack vector Network
Attack complexity Low
Privileges required None
User interaction None
Confidentiality Low
Integrity Low

CVSS vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

What the vulnerability does

01Description

SAP NetWeaver (Knowledge Management), versions - 7.30, 7.31, 7.40, 7.50, allows an unauthenticated attacker to upload a malicious file and also to access, modify or make unavailable existing files but the impact is limited to the files themselves and is restricted by other policies such as access control lists and other upload file size restrictions, leading to Unrestricted File Upload.

Key dates

02Disclosure timeline

August 12, 2020 CVE published
August 4, 2024 Record updated