CVE-2020-6193: SAP NetWeaver Knowledge Management

Medium severity, CVSS 6.1. EPSS: 0.7% chance of exploitation in the next 30 days.

SAP NetWeaver (Knowledge Management ICE Service), versions 7.30, 7.31, 7.40, 7.50, allows an unauthenticated attacker to execute malicious scripts leading to Reflected Cross-Site Scripting (XSS) vulnerability.

Affected products

• SAP NetWeaver Knowledge Management: version 7.30 only; version 7.31 only; version 7.40 only; version 7.50 only

Published 2020-02-12. Last modified 2026-06-17.