Netweaver Knowledge Management vulnerabilitiesRanked by how likely they are to be used.
Netweaver Knowledge Management is made by SAP. We track 6 published vulnerabilities listed under that exact name, across 6 versions. None of them is on the list of flaws known to be exploited today. SAP lists newer releases under their own names, such as Netweaver Knowledge Management and Collaboration (kmc-Cm), so check those pages too.
We keep watching the known-exploited list.
Is Netweaver Knowledge Management listed under other names? Yes.
SAP also lists Netweaver Knowledge Management under more specific names, such as Netweaver Knowledge Management and Collaboration (kmc-Cm) and Netweaver Knowledge Management and Collaboration (kmc-Wpc). Flaws listed only under those names are counted on their own pages, not here. If you run one of these, open its page for its own exploited flaws.
- Netweaver Knowledge Management and Collaboration (kmc-Cm)2 published vulnerabilities
- Netweaver Knowledge Management and Collaboration (kmc-Wpc)1 published vulnerability
- Netweaver Knowledge Management Configuration Service1 published vulnerability
- Netweaver Knowledge Management XML Forms1 published vulnerability
Which Netweaver Knowledge Management vulnerabilities are being exploited?
This is the list that matters most: flaws criminals are using now.
None of Netweaver Knowledge Management's published vulnerabilities is on the list of flaws known to be exploited today. We keep watching that list.
Which Netweaver Knowledge Management flaws are most likely to be used?
Ranked by the latest exploit-likelihood forecast: the chance each flaw is used in an attack in the next 30 days. A high severity score on its own doesn't tell you that. Flaws shared by many other makers' products are left out.
- 2.0%CVE-2021-33707Medium
SAP NetWeaver Knowledge Management allows remote attackers to redirect users to arbitrary websites and conduct phishing attacks via a URL stored in a component.
- 1.8%CVE-2020-6284Critical
SAP NetWeaver (Knowledge Management), versions - 7.30, 7.31, 7.40, 7.50, allows the automatic execution of script content in a stored file due to inadequate filtering with the accessing user's privileges.
- 1.3%CVE-2021-21488Medium
Knowledge Management versions 7.01, 7.02, 7.30, 7.31, 7.40, 7.50 allows a remote attacker with basic privileges to deserialize user-controlled data without verification, leading to insecure deserialization which...
- 0.9%CVE-2020-6293Medium
SAP NetWeaver (Knowledge Management), versions - 7.30, 7.31, 7.40, 7.50, allows an unauthenticated attacker to upload a malicious file and also to access, modify or make unavailable existing files but the impact is...
- 0.7%CVE-2020-6193Medium
SAP NetWeaver (Knowledge Management ICE Service), versions 7.30, 7.31, 7.40, 7.50, allows an unauthenticated attacker to execute malicious scripts leading to Reflected Cross-Site Scripting (XSS) vulnerability.
- 0.6%CVE-2020-6326Medium
SAP NetWeaver (Knowledge Management), version-7.30,7.31,7.40,7.50, allows an authenticated attacker to create malicious links in the UI, when clicked by victim, will execute arbitrary java scripts thus extracting or...
Running Netweaver Knowledge Management? We'll keep checking.
Looking flaws up one at a time doesn't scale. Tell us what you run once, and we tell you which flaws matter to you, in what order, and keep watching for new ones.
- Tell us what you runPick your software from a list, or let us work it out from your website.
- We match it to every flawOver 400,000 published flaws, checked against your list.
- Ranked by real-world riskA 0 to 100 score, led by evidence criminals are using it.
- Told as soon as we knowAn alert by email, in the app or by webhook to your own tools.
Free plan, no card needed. Nothing to install.
1 new flaw affects software Acme tracks
SAP NetWeaver Knowledge Management allows remote attackers to redirect users to arbitrary websites and conduct phishing attacks via a URL stored in a component. This could enable the attacker to compromise the user's confidentiality and integrity.
- Matched to
- Netweaver Knowledge Management on Acme's software list
- What to do
- Plan in the vendor’s update
Sent to the alert recipients Acme chose. Also in the app and to Acme's webhook.
We track 6 published vulnerabilities listed under the name Netweaver Knowledge Management, across 6 versions.
None of Netweaver Knowledge Management's vulnerabilities is on the list of flaws known to be exploited today.
SAP also lists Netweaver Knowledge Management under more specific names, such as Netweaver Knowledge Management and Collaboration (kmc-Cm) and Netweaver Knowledge Management and Collaboration (kmc-Wpc). Flaws listed only under those names are counted on their own pages, not here. Open the release you run to see its own list.
Create a Precursor Intelligence account and track Netweaver Knowledge Management. We match it against every published flaw, give each one a risk score from 0 to 100 and keep watching, so you hear about new ones as soon as we know, by email, in the app or by webhook.