Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

sap netweaver knowledge management 7.30 vulnerabilities and exploits

(subscribe to this query)
5.8
CVSSv2
CVE-2021-33707
SAP NetWeaver Knowledge Management allows remote malicious users to redirect users to arbitrary websites and conduct phishing attacks via a URL stored in a component. This could enable the malicious user to compromise the user's confidentiality and integrity.
Sap Netweaver Knowledge Management 7.30Sap Netweaver Knowledge Management 7.31Sap Netweaver Knowledge Management 7.40Sap Netweaver Knowledge Management 7.50
8.5
CVSSv2
CVE-2020-6284
SAP NetWeaver (Knowledge Management), versions - 7.30, 7.31, 7.40, 7.50, allows the automatic execution of script content in a stored file due to inadequate filtering with the accessing user's privileges. If the accessing user has administrative privileges, then the executio...
Sap Netweaver Knowledge Management 7.30Sap Netweaver Knowledge Management 7.31Sap Netweaver Knowledge Management 7.40Sap Netweaver Knowledge Management 7.50
6.4
CVSSv2
CVE-2020-6293
SAP NetWeaver (Knowledge Management), versions - 7.30, 7.31, 7.40, 7.50, allows an unauthenticated malicious user to upload a malicious file and also to access, modify or make unavailable existing files but the impact is limited to the files themselves and is restricted by other ...
Sap Netweaver Knowledge Management 7.30Sap Netweaver Knowledge Management 7.31Sap Netweaver Knowledge Management 7.40Sap Netweaver Knowledge Management 7.50
4.3
CVSSv2
CVE-2020-6193
SAP NetWeaver (Knowledge Management ICE Service), versions 7.30, 7.31, 7.40, 7.50, allows an unauthenticated malicious user to execute malicious scripts leading to Reflected Cross-Site Scripting (XSS) vulnerability.
Sap Netweaver Knowledge Management 7.30Sap Netweaver Knowledge Management 7.31Sap Netweaver Knowledge Management 7.40Sap Netweaver Knowledge Management 7.50
3.5
CVSSv2
CVE-2020-6326
SAP NetWeaver (Knowledge Management), version-7.30,7.31,7.40,7.50, allows an authenticated malicious user to create malicious links in the UI, when clicked by victim, will execute arbitrary java scripts thus extracting or modifying information otherwise restricted leading to Stor...
Sap Netweaver Knowledge Management 7.30Sap Netweaver Knowledge Management 7.31Sap Netweaver Knowledge Management 7.40Sap Netweaver Knowledge Management 7.50
4
CVSSv2
CVE-2021-21488
Knowledge Management versions 7.01, 7.02, 7.30, 7.31, 7.40, 7.50 allows a remote attacker with basic privileges to deserialize user-controlled data without verification, leading to insecure deserialization which triggers the attacker’s code, therefore impacting Availability...
Sap Netweaver Knowledge Management 7.01Sap Netweaver Knowledge Management 7.02Sap Netweaver Knowledge Management 7.30Sap Netweaver Knowledge Management 7.31Sap Netweaver Knowledge Management 7.40Sap Netweaver Knowledge Management 7.50
9
CVSSv2
CVE-2021-37531
SAP NetWeaver Knowledge Management XML Forms versions - 7.10, 7.11, 7.30, 7.31, 7.40, 7.50, contains an XSLT vulnerability which allows a non-administrative authenticated malicious user to craft a malicious XSL stylesheet file containing a script with OS-level commands, copy it i...
Sap Netweaver Knowledge Management Xml Forms 7.10Sap Netweaver Knowledge Management Xml Forms 7.11Sap Netweaver Knowledge Management Xml Forms 7.30Sap Netweaver Knowledge Management Xml Forms 7.31Sap Netweaver Knowledge Management Xml Forms 7.40Sap Netweaver Knowledge Management Xml Forms 7.50
6.5
CVSSv2
CVE-2020-6225
SAP NetWeaver (Knowledge Management), versions (KMC-CM - 7.00, 7.01, 7.02, 7.30, 7.31, 7.40, 7.50 and KMC-WPC 7.30, 7.31, 7.40, 7.50), does not sufficiently validate path information provided by users, thus characters representing traverse to parent directory are passed through t...
Sap Netweaver Knowledge Management And Collaboration \\(kmc-cm\\) 7.00Sap Netweaver Knowledge Management And Collaboration \\(kmc-cm\\) 7.01Sap Netweaver Knowledge Management And Collaboration \\(kmc-cm\\) 7.02Sap Netweaver Knowledge Management And Collaboration \\(kmc-cm\\) 7.30Sap Netweaver Knowledge Management And Collaboration \\(kmc-cm\\) 7.31Sap Netweaver Knowledge Management And Collaboration \\(kmc-cm\\) 7.40Sap Netweaver Knowledge Management And Collaboration \\(kmc-cm\\) 7.50Sap Netweaver Knowledge Management And Collaboration \\(kmc-wpc\\) 7.30Sap Netweaver Knowledge Management And Collaboration \\(kmc-wpc\\) 7.31Sap Netweaver Knowledge Management And Collaboration \\(kmc-wpc\\) 7.40Sap Netweaver Knowledge Management And Collaboration \\(kmc-wpc\\) 7.50
6.5
CVSSv2
CVE-2017-16678
Server Side Request Forgery (SSRF) vulnerability in SAP NetWeaver Knowledge Management Configuration Service, EPBC and EPBC2 from 7.00 to 7.02; KMC-BC 7.30, 7.31, 7.40 and 7.50, that allows an malicious user to manipulate the vulnerable application to send crafted requests on beh...
Sap Netweaver Knowledge Management Configuration Service -Sap Epbc2Sap EpbcSap Kmc-bc 7.30Sap Kmc-bc 7.31Sap Kmc-bc 7.40Sap Kmc-bc 7.50
6.5
CVSSv2
CVE-2018-2477
Knowledge Management (XMLForms) in SAP NetWeaver, versions 7.30, 7.31, 7.40 and 7.50 does not sufficiently validate an XML document accepted from an untrusted source.
Sap Netweaver 7.40Sap Netweaver 7.31Sap Netweaver 7.50Sap Netweaver 7.30
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2022-48654CVE-2024-2757authentication bypassCVE-2024-3194CVE-2024-33640CVE-2024-21111dosinsecure direct object referenceCVE-2024-21345
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook