CVE-2020-6225

published 2020-04-14

CVE-2020-6225: SAP NetWeaver (Knowledge Management), versions (KMC-CM - 7.00, 7.01, 7.02, 7.30, 7.31, 7.40, 7.50 and KMC-WPC 7.30, 7.31, 7.40, 7.50), does not sufficiently…

Priority P3 51 high 8.8 CVSS 3.1

AV N AC L PR L UI N S U C H I H A H

SAP NetWeaver (Knowledge Management), versions (KMC-CM - 7.00, 7.01, 7.02, 7.30, 7.31, 7.40, 7.50 and KMC-WPC 7.30, 7.31, 7.40, 7.50), does not sufficiently validate path information provided by users, thus characters representing traverse to parent directory are passed through to the file APIs, allowing the attacker to overwrite, delete, or corrupt arbitrary files on the remote server, leading to Path Traversal.

Affected

14 ranges

Vendor	Product	Version range	Fixed in
sap	netweaver_knowledge_management_and_collaboration	—	—
sap	netweaver_knowledge_management_and_collaboration	—	—
sap	netweaver_knowledge_management_and_collaboration	—	—
sap	netweaver_knowledge_management_and_collaboration	—	—
sap	netweaver_knowledge_management_and_collaboration	—	—
sap	netweaver_knowledge_management_and_collaboration	—	—
sap	netweaver_knowledge_management_and_collaboration	—	—
sap_se	sap_netweaver	< 7.00	7.00
sap_se	sap_netweaver	< 7.01	7.01
sap_se	sap_netweaver	< 7.02	7.02
sap_se	sap_netweaver	< 7.30	7.30
sap_se	sap_netweaver	< 7.31	7.31
sap_se	sap_netweaver	< 7.40	7.40
sap_se	sap_netweaver	< 7.50	7.50

CVSS provenance

nvd v3.1 8.8 HIGH CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

nvd v3.0 9.1 CRITICAL CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:L/A:L

nvd v2.0 6.5 MEDIUM AV:N/AC:L/Au:S/C:P/I:P/A:P

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.

CWE-22