CVE-2019-0404

Mô tả

Tham khảo

• launchpad.support.sap.com · Permissions Required
• wiki.scn.sap.com/wiki/pages/viewpage.action · Vendor Advisory

Lỗ hổng khác của enable now

• CVE-2022-35297TRUNG BÌNH 5.4The application SAP Enable Now does not sufficiently encode user-controlled inputs over the network before it is placed in the output being …
• CVE-2021-27637TRUNG BÌNH 4.6Under certain conditions SAP Enable Now (SAP Workforce Performance Builder - Manager), versions - 1.0, 10 allows an attacker to access infor…
• CVE-2020-6197THẤP 3.3SAP Enable Now, before version 1908, does not invalidate session tokens in a timely manner. The Insufficient Session Expiration may allow at…
• CVE-2020-6178TRUNG BÌNH 5.4SAP Enable Now, before version 1911, sends the Session ID cookie value in URL. This might be stolen from the browser history or log files, l…
• CVE-2019-0405CAO 7.5SAP Enable Now, before version 1911, leaks information about the existence of a particular user which can be used to construct a list of use…