Login Request a demo
EN
Product
Enable Now
by Sap · last CVE Jul 9, 2024
14
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities14In the news0Timeline
Severity mix
Critical 1High 3Medium 9Low 1
Severity
All severities14Critical1High3Medium9Low1
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Enable Now to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2019-0385
6.5
1%
Nov 13
SAP Enable Now, before version 1908, does not sufficiently encode user-controlled inputs, resulting in Cross-Site Scripting (XSS) vulnerability
Affected: before 1908
CVE-2023-36918
6.1
0%
Jul 11
Cross-Site Scripting vulnerability in SAP Enable Now
Affected: All versions, or not specified
CVE-2023-33988
6.1
0%
Jul 11
Cross-Site Scripting vulnerability in SAP Enable Now
Affected: All versions, or not specified
CVE-2022-35297
5.4
1%
Oct 11
The application SAP Enable Now does not sufficiently encode user-controlled inputs over the network before it is placed in the output being served to other users, thereby…
Affected: 10
CVE-2020-6178
5.4
1%
Mar 10
SAP Enable Now, before version 1911, sends the Session ID cookie value in URL
Affected: before 1911
CVE-2019-0340
5.4
1%
Aug 14
The XML parser, which is being used by SAP Enable Now, before version 1902, has not been hardened correctly, leading to Missing XML Validation vulnerability
Affected: before 1902
CVE-2023-36919
5.3
0%
Jul 11
Information Disclosure in SAP Enable Now
Affected: All versions, or not specified
CVE-2024-34692
4.6
0%
Jul 9
[CVE-2024-34692] Unrestricted File upload vulnerability in SAP Enable Now
Affected: All versions, or not specified
CVE-2021-27637
4.6
0%
Jun 9
Under certain conditions SAP Enable Now (SAP Workforce Performance Builder - Manager), versions - 1.0, 10 allows an attacker to access information which would otherwise be…
Affected: 1.0; 10.0
Showing 9