Sap Enable Now
Approved changes feed: RSS · Atom
cpe:2.3:a:sap_se:sap_enable_now:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Sap Se (f8f3f5db-c060-5230-a8bd-f91674203607) |
|---|---|
| Product | Sap Enable Now (b8a3b316-be86-52eb-8322-b8324919e1bb) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2024-39596 |
vulnerable | 2026-06-08 06:41:51.173253 |
[CVE-2024-39596] Missing Authorization check vulnerability in SAP Enable Now
MEDIUM (4.3)
Due to missing authorization checks, SAP Enable
Now allows an author to escalate privileges to access information which should
otherwise be restricted. On successful exploitation, the attacker can cause
limited impact on confidentiality of the application.
Published: 2024-07-09T04:25:57.251Z
Updated: 2024-08-02T04:26:16.017Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-34692 |
vulnerable | 2026-06-08 06:37:34.858366 |
[CVE-2024-34692] Unrestricted File upload vulnerability in SAP Enable Now
LOW (3.3)
Due to missing verification of file type or
content, SAP Enable Now allows an authenticated attacker to upload arbitrary
files. These files include executables which might be downloaded and executed
by the user which could host malware. On successful exploitation an attacker
can cause limited impact on confidentiality and Integrity of the application.
Published: 2024-07-09T04:43:05.361Z
Updated: 2024-08-02T02:59:22.200Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-32730 |
vulnerable | 2026-06-08 06:37:23.739854 |
Missing authorization check in SAP Enable Now Manager
MEDIUM (6.5)
SAP Enable Now Manager does not perform necessary authorization checks for an authenticated user, resulting in escalation of privileges. On successful exploitation, the attacker with the role 'Learner' could gain access to other user's data in manager which will lead to a high impact to the confidentiality of the application.
Published: 2024-04-26T16:06:39.373Z
Updated: 2024-08-02T02:20:34.695Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-36920 |
vulnerable | 2026-06-08 06:08:14.682786 |
Clickjacking vulnerability in SAP Enable Now
MEDIUM (6.1)
In SAP Enable Now - versions WPB_MANAGER 1.0, WPB_MANAGER_CE 10, WPB_MANAGER_HANA 10, ENABLE_NOW_CONSUMP_DEL 1704, the X-FRAME-OPTIONS response header is not implemented, allowing an unauthenticated attacker to attempt clickjacking, which could result in disclosure or modification of information.
Published: 2023-10-30T16:51:52.041Z
Updated: 2024-09-06T20:33:35.907Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-36919 |
vulnerable | 2026-06-08 06:08:14.682329 |
Information Disclosure in SAP Enable Now
MEDIUM (5.3)
In SAP Enable Now - versions WPB_MANAGER 1.0, WPB_MANAGER_CE 10, WPB_MANAGER_HANA 10, ENABLE_NOW_CONSUMP_DEL 1704, the Referrer-Policy response header is not implemented, allowing an unauthenticated attacker to obtain referrer details, resulting in information disclosure.
Published: 2023-07-11T02:54:02.039Z
Updated: 2024-11-12T17:02:02.376Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-36918 |
vulnerable | 2026-06-08 06:08:14.681007 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-33988 |
vulnerable | 2026-06-08 06:06:24.145540 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-35297 |
vulnerable | 2026-06-08 05:46:04.558417 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-6197 |
vulnerable | 2026-06-08 05:26:44.698029 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-6178 |
vulnerable | 2026-06-08 05:26:44.643312 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-0405 |
vulnerable | 2026-06-08 05:12:19.877002 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-0404 |
vulnerable | 2026-06-08 05:12:19.876613 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-0403 |
vulnerable | 2026-06-08 05:12:19.876274 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-0385 |
vulnerable | 2026-06-08 05:12:19.833668 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-0341 |
vulnerable | 2026-06-08 05:12:19.726014 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-0340 |
vulnerable | 2026-06-08 05:12:19.725131 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.