Vulmon
Recent Vulnerabilities
Research Posts
Trends
Blog
About
Contact
Vulmon Alerts
By Relevance
By Risk Score
By Publish Date
sap enable now 10 vulnerabilities and exploits
(subscribe to this query)
6.1
CVSSv3
CVE-2023-36920
In SAP Enable Now - versions WPB_MANAGER 1.0, WPB_MANAGER_CE 10, WPB_MANAGER_HANA 10, ENABLE_NOW_CONSUMP_DEL 1704, the X-FRAME-OPTIONS response header is not implemented, allowing an unauthenticated malicious user to attempt clickjacking, which could result in disclosure or modif...
Sap Enable Now Enable Now Consump Del 1704
Sap Enable Now Wpb Manager Hana 10
Sap Enable Now Wpb Manager Ce 10
Sap Enable Now Wpb Manager 1.0
5.4
CVSSv3
CVE-2022-35297
The application SAP Enable Now does not sufficiently encode user-controlled inputs over the network before it is placed in the output being served to other users, thereby expanding the attack scope, resulting in Stored Cross-Site Scripting (XSS) vulnerability leading to limited i...
Sap Enable Now 10
4.6
CVSSv3
CVE-2021-27637
Under certain conditions SAP Enable Now (SAP Workforce Performance Builder - Manager), versions - 1.0, 10 allows an malicious user to access information which would otherwise be restricted leading to information disclosure.
Sap Enable Now 1.0
Sap Enable Now 10.0
5.3
CVSSv3
CVE-2023-36919
In SAP Enable Now - versions WPB_MANAGER 1.0, WPB_MANAGER_CE 10, WPB_MANAGER_HANA 10, ENABLE_NOW_CONSUMP_DEL 1704, the Referrer-Policy response header is not implemented, allowing an unauthenticated malicious user to obtain referrer details, resulting in information disclosure.
Sap Enable Now -
6.1
CVSSv3
CVE-2023-33988
In SAP Enable Now - versions WPB_MANAGER 1.0, WPB_MANAGER_CE 10, WPB_MANAGER_HANA 10, ENABLE_NOW_CONSUMP_DEL 1704, the Content-Security-Policy and X-XSS-Protection response headers are not implemented, allowing an unauthenticated malicious user to attempt reflected cross-site scr...
Sap Enable Now -
6.1
CVSSv3
CVE-2023-36918
In SAP Enable Now - versions WPB_MANAGER 1.0, WPB_MANAGER_CE 10, WPB_MANAGER_HANA 10, ENABLE_NOW_CONSUMP_DEL 1704, the X-Content-Type-Options response header is not implemented, allowing an unauthenticated malicious user to trigger MIME type sniffing, which leads to Cross-Site Sc...
Sap Enable Now -
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-3380
CVE-2024-1694
local file inclusion
CVE-2024-5645
CVE-2024-24919
XSS
CVE-2024-36774
CVE-2024-21306
SQL
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started