Advisories · Technology

SAP_SE SAP Enable Now.

Every CVE that names SAP_SE SAP Enable Now among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2024-34692 CVE record

CVSS 3.3 Low

[CVE-2024-34692] Unrestricted File upload vulnerability in SAP Enable Now
- SAP_SE SAP Enable Now
- Unrestricted file upload
Not analysed yet 9 Jul 2024
CVE-2024-39596 CVE record

CVSS 4.3 Medium

[CVE-2024-39596] Missing Authorization check vulnerability in SAP Enable Now
- SAP_SE SAP Enable Now
- Broken access control
Not analysed yet 9 Jul 2024
CVE-2024-32730 CVE record

CVSS 6.5 Medium

Missing authorization check in SAP Enable Now Manager
- SAP_SE SAP Enable Now
- Broken access control
Not analysed yet 26 Apr 2024
CVE-2023-36920 CVE record

CVSS 6.1 Medium

Clickjacking vulnerability in SAP Enable Now
- SAP SE SAP Enable Now
- CWE-1021
Not analysed yet 30 Oct 2023
CVE-2023-36919 CVE record

CVSS 5.3 Medium

Information Disclosure in SAP Enable Now
- SAP_SE SAP Enable Now
- CWE-213
Not analysed yet 11 Jul 2023
CVE-2023-36918 CVE record

CVSS 6.1 Medium

Cross-Site Scripting vulnerability in SAP Enable Now
- SAP_SE SAP Enable Now
- Cross-site scripting (XSS)
Not analysed yet 11 Jul 2023
CVE-2023-33988 CVE record

CVSS 6.1 Medium

Cross-Site Scripting vulnerability in SAP Enable Now
- SAP_SE SAP Enable Now
- Cross-site scripting (XSS)
Not analysed yet 11 Jul 2023
CVE-2022-35297 CVE record

Cross-site scripting in SAP SE SAP Enable Now
- SAP SE SAP Enable Now
- Cross-site scripting (XSS)
Not analysed yet 11 Oct 2022
CVE-2020-6197 CVE record

CVSS 3.8 Low

SAP Enable Now, before version 1908, does not invalidate session tokens in a timely manner.
- SAP SE SAP Enable Now
Not analysed yet 10 Mar 2020
CVE-2020-6178 CVE record

CVSS 5.4 Medium

SAP Enable Now, before version 1911, sends the Session ID cookie value in URL.
- SAP SE SAP Enable Now
Not analysed yet 10 Mar 2020
CVE-2019-0405 CVE record

SAP SE SAP Enable Now: SAP Enable Now, before version 1911, leaks information about the existence of a…
- SAP SE SAP Enable Now
Not analysed yet 11 Dec 2019
CVE-2019-0404 CVE record

SAP SE SAP Enable Now: SAP Enable Now, before version 1911, leaks information about network configuration in the…
- SAP SE SAP Enable Now
Not analysed yet 11 Dec 2019
CVE-2019-0403 CVE record

SAP SE SAP Enable Now: SAP Enable Now, before version 1911, allows an attacker to input commands into the CSV…
- SAP SE SAP Enable Now
Not analysed yet 11 Dec 2019
CVE-2019-0385 CVE record

SAP SE SAP Enable Now: SAP Enable Now, before version 1908, does not sufficiently encode user-controlled inputs…
- SAP SE SAP Enable Now
Not analysed yet 13 Nov 2019
CVE-2019-0340 CVE record

SAP SE SAP Enable Now: The XML parser, which is being used by SAP Enable Now, before version 1902…
- SAP SE SAP Enable Now
Not analysed yet 14 Aug 2019
CVE-2019-0341 CVE record

The session cookie used by SAP Enable Now, version 1902, does not have the HttpOnly flag set.
- SAP SE SAP Enable Now
Not analysed yet 14 Aug 2019