Approved changes feed: RSS · Atom

cpe:2.3:a:sap:enable_now_manager:1.0:*:*:*:*:*:*:*

part: a version: 1.0 update: *

VendorSap (dd5aa0c0-20b0-5c86-a937-aa29f1a33b77)
ProductEnable Now Manager (cfd1bd1e-e365-5db9-993c-9537e65e599b)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-32730 vulnerable 2026-06-08 06:37:23.738505 Missing authorization check in SAP Enable Now Manager
MEDIUM (6.5)
SAP Enable Now Manager does not perform necessary authorization checks for an authenticated user, resulting in escalation of privileges. On successful exploitation, the attacker with the role 'Learner' could gain access to other user's data in manager which will lead to a high impact to the confidentiality of the application.
Published: 2024-04-26T16:06:39.373Z
Updated: 2024-08-02T02:20:34.695Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-35293 vulnerable 2026-06-08 05:46:04.541543 Details available
Due to insecure session management, SAP Enable Now allows an unauthenticated attacker to gain access to user's account. On successful exploitation, an attacker can view or modify user data causing limited impact on confidentiality and integrity of the application.
Published: 2022-08-09T20:13:16.000Z
Updated: 2026-06-23T14:35:37.150Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.