CVE-2020-6326 MEDIUM

CVE-2020-6326

Vendor Sap Se
Product SAP NetWeaver (Knowledge Management)
Published September 9, 2020
Last update August 4, 2024

CVSS base score

5.4/10
Attack vector Network
Attack complexity Low
Privileges required Low
User interaction Required
Confidentiality Low
Integrity Low

CVSS vector

CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

What the vulnerability does

01Description

SAP NetWeaver (Knowledge Management), version-7.30,7.31,7.40,7.50, allows an authenticated attacker to create malicious links in the UI, when clicked by victim, will execute arbitrary java scripts thus extracting or modifying information otherwise restricted leading to Stored Cross Site Scripting.

Key dates

02Disclosure timeline

September 9, 2020 CVE published
August 4, 2024 Record updated