VDB
GHSA-rw6f-wgvq-rrvg
GHSA-rw6f-wgvq-rrvg
PUBLISHED
CVSS 6.099999904632568 MEDIUM
Record from GitHub Advisory Database · Published December 15, 2021
A security vulnerability has been discovered in the SAP Knowledge Warehouse - versions 7.30, 7.31, 7.40, 7.50. The usage of one SAP KW component within a Web browser enables unauthorized attackers to conduct XSS attacks, which might lead to disclose sensitive data.
Risk scores
CVSS 3.1
6.099999904632568
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Timeline
- Dec 15, 2021 CVE Published
- Apr 9, 2026 Security Advisory
Query this with the API
The same record, from the CLI:
vulnetix vdb vuln GHSA-rw6f-wgvq-rrvg
vulnetix vdb fixes GHSA-rw6f-wgvq-rrvg
Or with curl, using the org id and key from your account page:
curl -s -H "Authorization: ApiKey ${VULNETIX_ORG_ID}:${VULNETIX_API_KEY}" \
"https://api.vdb.vulnetix.com/v2/vuln/GHSA-rw6f-wgvq-rrvg/fixes/registry"
The Community plan is free and allows 50 queries a day. Get a free API key · API quickstart
References
- https://nvd.nist.gov/vuln/detail/CVE-2021-42063 advisory
- https://launchpad.support.sap.com/#/notes/3102769 url
- https://wiki.scn.sap.com/wiki/display/PSR/SAP+Security+Patch+Day+-+December+2021 url
- http://seclists.org/fulldisclosure/2022/Mar/32 url
- http://packetstormsecurity.com/files/166369/SAP-Knowledge-Warehouse-7.50-7.40-7.31-7.30-Cross-Site-Scripting.html exploit