CVE-2019-0385

Description

References

• launchpad.support.sap.com · Permissions Required
• wiki.scn.sap.com/wiki/pages/viewpage.action · Vendor Advisory

enable now의 다른 취약점

• CVE-2022-35297보통 5.4The application SAP Enable Now does not sufficiently encode user-controlled inputs over the network before it is placed in the output being …
• CVE-2021-27637보통 4.6Under certain conditions SAP Enable Now (SAP Workforce Performance Builder - Manager), versions - 1.0, 10 allows an attacker to access infor…
• CVE-2020-6197낮음 3.3SAP Enable Now, before version 1908, does not invalidate session tokens in a timely manner. The Insufficient Session Expiration may allow at…
• CVE-2020-6178보통 5.4SAP Enable Now, before version 1911, sends the Session ID cookie value in URL. This might be stolen from the browser history or log files, l…
• CVE-2019-0405높음 7.5SAP Enable Now, before version 1911, leaks information about the existence of a particular user which can be used to construct a list of use…