Lucene search
PRIOn knowledge basePRION:CVE-2023-33988HistoryJul 11, 2023 - 3:15 a.m.
Cross site scripting
2023-07-1103:15:00
PRIOn knowledge base
www.prio-n.com
5
sap enable now
wpb_manager
wpb_manager_ce
wpb_manager_hana
enable_now_consump_del
content-security-policy
x-xss-protection
reflected
cross-site scripting
unauthenticated attacker
disclosure
modification
In SAP Enable Now - versions WPB_MANAGER 1.0, WPB_MANAGER_CE 10, WPB_MANAGER_HANA 10, ENABLE_NOW_CONSUMP_DEL 1704, the Content-Security-Policy and X-XSS-Protection response headers are not implemented, allowing an unauthenticated attacker to attempt reflected cross-site scripting, which could result in disclosure or modification of information.
Related
cve
cve
CVE-2023-33988
2023-07-11 03:15:09
cvelist
cvelist
CVE-2023-33988 Cross-Site Scripting vulnerability in SAP Enable Now
2023-07-11 02:26:57
nvd
nvd
CVE-2023-33988
2023-07-11 03:15:09