CVE-2022-35293

2022-08-0920:13:16

CWE-862

sap

www.cve.org

9.6 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

56.9%

JSON

Due to insecure session management, SAP Enable Now allows an unauthenticated attacker to gain access to user’s account. On successful exploitation, an attacker can view or modify user data causing limited impact on confidentiality and integrity of the application.

CNA Affected

[
  {
    "product": "SAP Enable Now Manager",
    "vendor": "SAP SE",
    "versions": [
      {
        "status": "affected",
        "version": "1.0"
      }
    ]
  }
]