CVE-2019-0385 SAP Enable Now, before version 1908, does not sufficiently encode user-controlled inputs, resulting in Cross-Site Scripting (XSS) vulnerability.
MediumCVSS 6.5
EPSS 0.53%
- Published
- Updated
- Exploit status
- No public exploit known
Description
SAP Enable Now, before version 1908, does not sufficiently encode user-controlled inputs, resulting in Cross-Site Scripting (XSS) vulnerability.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| sap enable now | < 1908 | 1908 |
| SAP_SE SAP Enable Now | = < 1908 | No fix listed |
References
- launchpad.support.sap.com permissions-required vendor-advisory
- wiki.scn.sap.com vendor-advisory