CVE-2020-6293

Published: Aug 12, 2020Modified: Nov 21, 2024

6.5

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N

Exploitability: 3.9 / Impact: 2.5

Source: NVD

Description

SAP NetWeaver (Knowledge Management), versions - 7.30, 7.31, 7.40, 7.50, allows an unauthenticated attacker to upload a malicious file and also to access, modify or make unavailable existing files but the impact is limited to the files themselves and is restricted by other policies such as access control lists and other upload file size restrictions, leading to Unrestricted File Upload.

Affected (4)

Products: Sap: Netweaver Knowledge Management

Sap

1 product

Netweaver Knowledge Management

Configuration A

4 vulnerable

Vulnerable Software	Affected Versions
Sap Netweaver Knowledge Management	Version 7.30
Sap Netweaver Knowledge Management	Version 7.31
Sap Netweaver Knowledge Management	Version 7.40
Sap Netweaver Knowledge Management	Version 7.50