SAP NetWeaver Knowledge Management And Collaboration (kmc-Cm) vulnerabilities

2 CVEs affecting SAP NetWeaver Knowledge Management And Collaboration (kmc-Cm), 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2024-34685, published 2024-07-09.

More from SAP.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2020-6225, published 2020-04-14. High severity, CVSS 8.8. EPSS: 1.1% chance of exploitation in the next 30 days. SAP NetWeaver (Knowledge Management), versions (KMC-CM - 7.00, 7.01, 7.02, 7.30, 7.31, 7.40, 7.50 and KMC-WPC 7.30, 7.31, 7.40, 7.50), does not sufficiently validate path information provided by…
• CVE-2024-34685, published 2024-07-09. Medium severity, CVSS 6.1. EPSS: 0.3% chance of exploitation in the next 30 days. Due to weak encoding of user-controlled input in SAP NetWeaver Knowledge Management XMLEditor which allows malicious scripts can be executed in the application, potentially leading to a Cross-Site…