CVE-2019-0385

MEDIUM

SAP Enable Now < 1908 - Cross-Site Scripting

Title source: llm

SAP Enable Now, before version 1908, does not sufficiently encode user-controlled inputs, resulting in Cross-Site Scripting (XSS) vulnerability.

Core 2

Core References

Permissions Required, Vendor Advisory x_refsource_misc

Vendor Advisory x_refsource_misc

CVSS v3 6.5

EPSS 0.0029

EPSS Percentile 52.7%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L

CWE

CWE-79

Status published

Products (1)

sap/enable_now < 1908

Published Nov 13, 2019

Tracked Since Feb 18, 2026