SAP Enable Now
Approved changes feed: RSS · Atom
cpe:2.3:a:sap:enable_now:-:*:*:*:*:*:*:*
part: a version: - update: *
| Vendor | Sap (dd5aa0c0-20b0-5c86-a937-aa29f1a33b77) |
|---|---|
| Product | Enable Now (f8ecf8a9-28d0-57a2-ae84-462b96593a86) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2023-36919 |
vulnerable | 2026-06-08 06:08:14.682376 |
Information Disclosure in SAP Enable Now
MEDIUM (5.3)
In SAP Enable Now - versions WPB_MANAGER 1.0, WPB_MANAGER_CE 10, WPB_MANAGER_HANA 10, ENABLE_NOW_CONSUMP_DEL 1704, the Referrer-Policy response header is not implemented, allowing an unauthenticated attacker to obtain referrer details, resulting in information disclosure.
Published: 2023-07-11T02:54:02.039Z
Updated: 2024-11-12T17:02:02.376Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-36918 |
vulnerable | 2026-06-08 06:08:14.681772 |
Cross-Site Scripting vulnerability in SAP Enable Now
MEDIUM (6.1)
In SAP Enable Now - versions WPB_MANAGER 1.0, WPB_MANAGER_CE 10, WPB_MANAGER_HANA 10, ENABLE_NOW_CONSUMP_DEL 1704, the X-Content-Type-Options response header is not implemented, allowing an unauthenticated attacker to trigger MIME type sniffing, which leads to Cross-Site Scripting, which could result in disclosure or modification of information.
Published: 2023-07-11T02:49:54.837Z
Updated: 2024-10-23T16:22:12.521Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-33988 |
vulnerable | 2026-06-08 06:06:24.146414 |
Cross-Site Scripting vulnerability in SAP Enable Now
MEDIUM (6.1)
In SAP Enable Now - versions WPB_MANAGER 1.0, WPB_MANAGER_CE 10, WPB_MANAGER_HANA 10, ENABLE_NOW_CONSUMP_DEL 1704, the Content-Security-Policy and X-XSS-Protection response headers are not implemented, allowing an unauthenticated attacker to attempt reflected cross-site scripting, which could result in disclosure or modification of information.
Published: 2023-07-11T02:26:57.068Z
Updated: 2024-10-21T21:10:43.834Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.