What’s Vulnerable › Vulnerabilities

CVE-2020-6326

• Severity: medium (CVSS 5.4 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.6% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2020-09-09 · updated 2026-06-17
• Weakness: CWE-79

Description

SAP NetWeaver (Knowledge Management), version-7.30,7.31,7.40,7.50, allows an authenticated attacker to create malicious links in the UI, when clicked by victim, will execute arbitrary java scripts thus extracting or modifying information otherwise restricted leading to Stored Cross Site Scripting.

Affected products

• SAP SE SAP NetWeaver (Knowledge Management): 7.30, 7.31, 7.40, 7.50

References

• https://launchpad.support.sap.com/#/notes/2953112
• https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=557449700
• https://launchpad.support.sap.com/#/notes/2953112
• https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=557449700

Get alerted when CVE-2020-6326 or the next vulnerability affects your stack