Netweaver Knowledge Management (Sap) - vulnerabilities (CVEs)

6 CVEs, 0 in the last 30 days, 6 known versions, newest CVE from 2021-08-10. Vendor: Sap.

CVEs of Netweaver Knowledge Management

• CVE-2021-33707 - CVSS 6.1 (medium), 2021-08-10: SAP NetWeaver Knowledge Management allows remote attackers to redirect users to arbitrary websites and conduct phishing attacks via a URL stored in a…
• CVE-2021-21488 - CVSS 6.5 (medium), 2021-03-09: Knowledge Management versions 7.01, 7.02, 7.30, 7.31, 7.40, 7.50 allows a remote attacker with basic privileges to deserialize user-controlled data without…
• CVE-2020-6326 - CVSS 5.4 (medium), 2020-09-09: SAP NetWeaver (Knowledge Management), version-7.30,7.31,7.40,7.50, allows an authenticated attacker to create malicious links in the UI, when clicked by…
• CVE-2020-6293 - CVSS 7.3 (high), 2020-08-12: SAP NetWeaver (Knowledge Management), versions - 7.30, 7.31, 7.40, 7.50, allows an unauthenticated attacker to upload a malicious file and also to access,…
• CVE-2020-6284 - CVSS 9 (critical), 2020-08-12: SAP NetWeaver (Knowledge Management), versions - 7.30, 7.31, 7.40, 7.50, allows the automatic execution of script content in a stored file due to inadequate…
• CVE-2020-6193 - CVSS 6.1 (medium), 2020-02-12: SAP NetWeaver (Knowledge Management ICE Service), versions 7.30, 7.31, 7.40, 7.50, allows an unauthenticated attacker to execute malicious scripts leading to…