SAP SE SAP Enable Now

• CVE-2024-34692 Low 3.3 [CVE-2024-34692] Unrestricted File upload vulnerability in SAP Enable Now 0.2%
• CVE-2024-39596 Medium 4.3 [CVE-2024-39596] Missing Authorization check vulnerability in SAP Enable Now 0.3%
• CVE-2024-32730 Medium 6.5 Missing authorization check in SAP Enable Now Manager 0.6%
• CVE-2023-36920 Medium 6.1 Clickjacking vulnerability in SAP Enable Now 0.4%
• CVE-2023-36919 Medium 5.3 Information Disclosure in SAP Enable Now 0.5%
• CVE-2023-36918 Medium 6.1 Cross-Site Scripting vulnerability in SAP Enable Now 0.4%
• CVE-2023-33988 Medium 6.1 Cross-Site Scripting vulnerability in SAP Enable Now 0.4%
• CVE-2022-35297 Unrated The application SAP Enable Now does not sufficiently encode user-controlled inputs over the network before it is placed in the output being served to other users, thereby expanding the attack scope, r 0.6%
• CVE-2020-6197 Low 3.8 SAP Enable Now, before version 1908, does not invalidate session tokens in a timely manner. The Insufficient Session Expiration may allow attackers with local access, for instance, to still download t 0.6%
• CVE-2020-6178 Medium 5.4 SAP Enable Now, before version 1911, sends the Session ID cookie value in URL. This might be stolen from the browser history or log files, leading to Information Disclosure. 0.7%