| Package | Affected versions | Patched versions |
|---|---|---|
| netweaver knowledge management and collaboration (kmc-cm) | = 7.50 |
Due to weak encoding of user-controlled input in SAP NetWeaver Knowledge Management XMLEditor which allows malicious scripts can be executed in the application, potentially leading to a Cross-Site Scripting (XSS) vulnerability. This has no impact on the availability of the application but it has a low impact on its confidentiality and integrity.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free