CVE-2020-6193

CWE-79 — Cross-site Scripting (XSS)3 documents3 sources

Severity

6.1MEDIUM

EPSS

0.4%

top 37.90%

CISA KEV

Not in KEV

Exploit

No known exploits

Affected products

SAP SE SAP Netweaver (knowledge Management ICE Service)SAP Netweaver Knowledge Management

Timeline

PublishedFeb 12

Latest updateMay 24

Description

SAP NetWeaver (Knowledge Management ICE Service), versions 7.30, 7.31, 7.40, 7.50, allows an unauthenticated attacker to execute malicious scripts leading to Reflected Cross-Site Scripting (XSS) vulnerability.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:NExploitability: 2.8 | Impact: 2.7

Affected Packages2 packages

▶CVEListV5sap_se/sap_netweaver_(knowledge_management_ice_service)4 versions+3

▶NVDsap/netweaver_knowledge_management4 versions+3

🔴Vulnerability Details

GHSA

GHSA-xjj7-3469-hmrm: SAP NetWeaver (Knowledge Management ICE Service), versions 7↗2022-05-24

▶

CVEList

CVE-2020-6193: SAP NetWeaver (Knowledge Management ICE Service), versions 7↗2020-02-12

▶