Approved changes feed: RSS · Atom

cpe:2.3:a:sap:enable_now_wpb_manager_hana:10:*:*:*:*:*:*:*

part: a version: 10 update: *

VendorSap (dd5aa0c0-20b0-5c86-a937-aa29f1a33b77)
ProductEnable Now Wpb Manager Hana (1a4edd60-7a05-51e1-87ba-a2e9ea39bdce)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2023-36920 vulnerable 2026-06-08 06:08:14.686530 Clickjacking vulnerability in SAP Enable Now
MEDIUM (6.1)
In SAP Enable Now - versions WPB_MANAGER 1.0, WPB_MANAGER_CE 10, WPB_MANAGER_HANA 10, ENABLE_NOW_CONSUMP_DEL 1704, the X-FRAME-OPTIONS response header is not implemented, allowing an unauthenticated attacker to attempt clickjacking, which could result in disclosure or modification of information.
Published: 2023-10-30T16:51:52.041Z
Updated: 2024-09-06T20:33:35.907Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.