CVE-2024-34685: SAP NetWeaver Knowledge Management And Collaboration (kmc-Cm)

Medium severity, CVSS 6.1. EPSS: 0.3% chance of exploitation in the next 30 days.

Due to weak encoding of user-controlled input in SAP NetWeaver Knowledge Management XMLEditor which allows malicious scripts can be executed in the application, potentially leading to a Cross-Site Scripting (XSS) vulnerability. This has no impact on the availability of the application but it has a low impact on its confidentiality and integrity.

Affected products

• SAP NetWeaver Knowledge Management And Collaboration (kmc-Cm): version 7.50 only

Published 2024-07-09. Last modified 2026-06-17.