SAP NetWeaver Knowledge Management and Collaboration (KMC-WPC) 7.50
Approved changes feed: RSS · Atom
cpe:2.3:a:sap:netweaver_knowledge_management_and_collaboration_\(kmc-wpc\):7.50:*:*:*:*:*:*:*
part: a version: 7.50 update: *
| Vendor | Sap (dd5aa0c0-20b0-5c86-a937-aa29f1a33b77) |
|---|---|
| Product | Netweaver Knowledge Management And Collaboration (Kmc Wpc) (746d89ed-497b-53f0-b5f3-adf20338dd64) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2020-6225 |
vulnerable | 2026-06-08 05:26:44.803474 |
Details available
CRITICAL (9.1)
SAP NetWeaver (Knowledge Management), versions (KMC-CM - 7.00, 7.01, 7.02, 7.30, 7.31, 7.40, 7.50 and KMC-WPC 7.30, 7.31, 7.40, 7.50), does not sufficiently validate path information provided by users, thus characters representing traverse to parent directory are passed through to the file APIs, allowing the attacker to overwrite, delete, or corrupt arbitrary files on the remote server, leading to Path Traversal.
Published: 2020-04-14T19:40:25.000Z
Updated: 2024-08-04T08:55:22.160Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.