CVE-2024-39596mediumCWE-862

CVE-2024-39596: medium-severity vulnerability in SAP_SE SAP Enable Now

[CVE-2024-39596] Missing Authorization check vulnerability in SAP Enable Now

Published · Updated

Follow this CVE+ Monitor SAP Enable Now

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

13Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 4.3epss 0.3%
Due to missing authorization checks, SAP Enable Now allows an author to escalate privileges to access information which should otherwise be restricted. On successful exploitation, the attacker can cause limited impact on confidentiality of the application.
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
Affected products
SAP_SE · SAP Enable Now
Related CVEs — SAP_SE SAP Enable Now

In the same product, most dangerous first.

CVE-2024-32730MEDIUMMissing authorization check in SAP Enable Now ManagerEPSS 0.6%CVE-2023-36919MEDIUMInformation Disclosure in SAP Enable NowEPSS 0.5%CVE-2023-36918MEDIUMCross-Site Scripting vulnerability in SAP Enable NowEPSS 0.4%CVE-2023-33988MEDIUMCross-Site Scripting vulnerability in SAP Enable NowEPSS 0.4%CVE-2024-34692LOW[CVE-2024-34692] Unrestricted File upload vulnerability in SAP Enable NowEPSS 0.2%