SAP Enable Now Cross-Site Scripting Vulnerability

SAP Enable Now is a collaborative content creation, management and sharing platform from SAP Germany. The platform is mainly used for online learning and training in SAP and non-SAP systems, etc. A cross-site scripting vulnerability exists in SAP Enable Now version 10.1, which stems from the fact that user-controlled input is not sufficiently encoded over the network before being provided to other users’ output, and can be exploited by attackers to launch cross-site attacks.