CVE-2020-6326

Name of the Vulnerable Software and Affected Versions SAP NetWeaver (Knowledge Management) versions 7.30 through 7.50

Description The issue allows an authenticated attacker to create malicious links in the UI. When clicked by a victim, these links will execute arbitrary Java scripts, thus extracting or modifying information otherwise restricted, leading to Stored Cross Site Scripting.

Recommendations For versions 7.30 through 7.50, update to a version that includes the fix for this issue to prevent Stored Cross Site Scripting attacks.