Netweaver_knowledge_management_and_collaboration_\(Kmc\-Cm\)

Repositories	Unknown: This might be proprietary software.
#Vulnerabilities	2

Date	Id	Summary	Products	Score	Patch	Annotated
2024-07-09	CVE-2024-34685	Due to weak encoding of user-controlled input in SAP NetWeaver Knowledge Management XMLEditor which allows malicious scripts can be executed in the application, potentially leading to a Cross-Site Scripting (XSS) vulnerability. This has no impact on the availability of the application but it has a low impact on its confidentiality and integrity.	Netweaver_knowledge_management_and_collaboration_\(Kmc\-Cm\)	6.1
2020-04-14	CVE-2020-6225	SAP NetWeaver (Knowledge Management), versions (KMC-CM - 7.00, 7.01, 7.02, 7.30, 7.31, 7.40, 7.50 and KMC-WPC 7.30, 7.31, 7.40, 7.50), does not sufficiently validate path information provided by users, thus characters representing traverse to parent directory are passed through to the file APIs, allowing the attacker to overwrite, delete, or corrupt arbitrary files on the remote server, leading to Path Traversal.	Netweaver_knowledge_management_and_collaboration_\(Kmc\-Cm\), Netweaver_knowledge_management_and_collaboration_\(Kmc\-Wpc\)	N/A