CVE-2020-6326: SAP NetWeaver Knowledge Management

Medium severity, CVSS 5.4. EPSS: 0.6% chance of exploitation in the next 30 days.

SAP NetWeaver (Knowledge Management), version-7.30,7.31,7.40,7.50, allows an authenticated attacker to create malicious links in the UI, when clicked by victim, will execute arbitrary java scripts thus extracting or modifying information otherwise restricted leading to Stored Cross Site Scripting.

Affected products

• SAP NetWeaver Knowledge Management: version 7.30 only; version 7.31 only; version 7.40 only; version 7.50 only

Published 2020-09-09. Last modified 2026-06-17.