CVE-2020-6284
Summary
| CVE | CVE-2020-6284 |
|---|
| State | PUBLIC |
|---|
| Assigner | [email protected] |
|---|
| Source Priority | CVE Program / NVD first with legacy fallback |
|---|
| Published | 2020-08-12 14:15:00 UTC |
|---|
| Updated | 2020-08-14 16:15:00 UTC |
|---|
| Description | SAP NetWeaver (Knowledge Management), versions - 7.30, 7.31, 7.40, 7.50, allows the automatic execution of script content in a stored file due to inadequate filtering with the accessing user's privileges. If the accessing user has administrative privileges, then the execution of the script content could result in complete compromise of system confidentiality, integrity and availability, leading to Stored Cross Site Scripting. |
|---|
NVD Known Affected Configurations (CPE 2.3)
References
| Reference | Source | Link | Tags |
|---|
| launchpad.support.sap.com |
MISC |
launchpad.support.sap.com |
Permissions Required |
| SAP Security Patch Day – August 2020 - Product Security Response at SAP - Community Wiki |
MISC |
wiki.scn.sap.com |
Vendor Advisory |
| CVE Program record |
CVE.ORG |
www.cve.org |
canonical |
| NVD vulnerability detail |
NVD |
nvd.nist.gov |
canonical, analysis |
No vendor comments have been submitted for this CVE.
Legacy QID Mappings
- 87459 SAP NetWeaver AS Java Remote Code Execution Vulnerability
