CVE-2022-35293

CVE-2022-35293

Vendor Sap Se
Product SAP Enable Now Manager
Weakness CWE-862 · Missing authorization
Published August 9, 2022
Last update August 3, 2024

CVSS base score

What the vulnerability does

01Description

Due to insecure session management, SAP Enable Now allows an unauthenticated attacker to gain access to user's account. On successful exploitation, an attacker can view or modify user data causing limited impact on confidentiality and integrity of the application.

Key dates

02Disclosure timeline

August 9, 2022 CVE published
August 3, 2024 Record updated

Related vulnerabilities

04Related CVE