Vulnerabilities > CVE-2024-34685 - Unspecified vulnerability in SAP Netweaver Knowledge Management and Collaboration (Kmc-Cm) 7.50
Attack vector
NETWORK Attack complexity
LOW Privileges required
NONE Confidentiality impact
LOW Integrity impact
LOW Availability impact
NONE Summary
Due to weak encoding of user-controlled input in SAP NetWeaver Knowledge Management XMLEditor which allows malicious scripts can be executed in the application, potentially leading to a Cross-Site Scripting (XSS) vulnerability. This has no impact on the availability of the application but it has a low impact on its confidentiality and integrity.
Vulnerable Configurations
| Part | Description | Count |
|---|---|---|
| Application | 1 |