← back
CVE-2024-39596

[CVE-2024-39596] Missing Authorization check vulnerability in SAP Enable Now

CVSS 4.3 MEDIUMEPSS 0.3%CWE-862
Due to missing authorization checks, SAP Enable Now allows an author to escalate privileges to access information which should otherwise be restricted. On successful exploitation, the attacker can cause limited impact on confidentiality of the application.
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
Affected products
SAP_SE · SAP Enable Now

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →