Security Advisory

CVE-2020-6284

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2020-08-12 13:21:04

Last updated 2024-08-04 08:55:22

Assigner sap

State PUBLISHED

Description

SAP NetWeaver (Knowledge Management), versions - 7.30, 7.31, 7.40, 7.50, allows the automatic execution of script content in a stored file due to inadequate filtering with the accessing users privileges. If the accessing user has administrative privileges, then the execution of the script content could result in complete compromise of system confidentiality, integrity and availability, leading to Stored Cross Site Scripting.

← Browse all CVEs View on cve.org ↗