Tag: Knowledge Management

CVE-2020-6284 Cross-Site Scripting (XSS) in SAP NetWeaver (Knowledge Management), SAP security note 2928635

RedRays Team October 27, 2020

CVE-2020-6326 Cross-Site Scripting (XSS) vulnerabilities in SAP NetWeaver AS Java, SAP security note 2953112

RedRays Team September 8, 2020

CVE-2020-6293 Unrestricted File Upload in SAP NetWeaver (Knowledge Management), SAP security note 2938162

RedRays Team August 11, 2020

CVE-2020-6193Cross-Site Scripting (XSS) vulnerability in SAP NetWeaver (Knowledge Management ICE Service), SAP security note 2873012

RedRays Team February 11, 2020

CVE-2018-2477 XML External Entity (XXE) vulnerability in SAP NetWeaver Knowledge Management XMLForms, SAP security note 2661740

RedRays Team November 13, 2018

CVE-2017-16678 Server Side Request Forgery (SSRF) vulnerability in SAP NetWeaver Knowledge Management Configuration Service, SAP security note 2457562

RedRays Team December 12, 2017

Cross-Site Scripting (XSS) vulnerability in SAP NetWeaver Knowledge Management XMLForms, SAP security note 2464582

RedRays Team November 14, 2017

URL Redirection vulnerability in SAP NetWeaver K.M. Web Page Composer, SAP security note 2394536

RedRays Team August 8, 2017

Caching KM Content in the Portal, SAP security note 2158791

RedRays Team July 11, 2017

Missing XML Validation vulnerability in Knowledge Management ICE Service, SAP security note 2387249

RedRays Team April 11, 2017

Certain service calls can be executed though URL, SAP security note 1645146

RedRays Team February 14, 2012

Potential information disclosure relating to KM UI, SAP security note 1619539

RedRays Team January 10, 2012