CVE-2019-0385

CVE-2019-0385: vulnerability in SAP Enable Now

Published · Updated

Follow this CVE+ Monitor SAP Enable Now

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

3Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackepss 0.5%
SAP Enable Now, before version 1908, does not sufficiently encode user-controlled inputs, resulting in Cross-Site Scripting (XSS) vulnerability.
Affected products
SAP SE · SAP Enable Now
Related CVEs — SAP Enable Now

In the same product, most dangerous first.

CVE-2019-0403—CVE-2019-0403EPSS 2.1%CVE-2019-0405—CVE-2019-0405EPSS 1.1%CVE-2019-0404—CVE-2019-0404EPSS 1.1%CVE-2019-0341—CVE-2019-0341EPSS 1.1%CVE-2020-6178MEDIUMCVE-2020-6178EPSS 0.7%CVE-2019-0340—CVE-2019-0340EPSS 0.7%