CVE-2020-6193

MEDIUM

SAP NetWeaver Knowledge Management 7.30, 7.31, 7.40, 7.50 - Unauthenticated Reflected Cross-Site Scripting

Title source: llm

Description

SAP NetWeaver (Knowledge Management ICE Service), versions 7.30, 7.31, 7.40, 7.50, allows an unauthenticated attacker to execute malicious scripts leading to Reflected Cross-Site Scripting (XSS) vulnerability.

References (2)

Core 2

Core References

Vendor Advisory x_refsource_misc

https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=537788812

Permissions Required, Vendor Advisory x_refsource_misc

https://launchpad.support.sap.com/#/notes/2873012

Scores

CVSS v3 6.1

EPSS 0.0042

EPSS Percentile 62.3%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Details

CWE

CWE-79

Status published

Products (4)

sap/netweaver_knowledge_management 7.30

sap/netweaver_knowledge_management 7.31

sap/netweaver_knowledge_management 7.40

sap/netweaver_knowledge_management 7.50

Published Feb 12, 2020

Tracked Since Feb 18, 2026