Description
In SAP Enable Now - versions WPB_MANAGER 1.0, WPB_MANAGER_CE 10, WPB_MANAGER_HANA 10, ENABLE_NOW_CONSUMP_DEL 1704, the Content-Security-Policy and X-XSS-Protection response headers are not implemented, allowing an unauthenticated attacker to attempt reflected cross-site scripting, which could result in disclosure or modification of information.

Published: 2023-07-11
Score: 6.1 Medium
EPSS: < 1% Very Low
KEV: No
Impact: n/a
Action: n/a
AI Analysis

Analysis and contextual insights are available on OpenCVE Cloud.

Remediation

No vendor fix or workaround currently provided.

Additional remediation guidance may be available on OpenCVE Cloud.

Tracking

Sign in to view the affected projects.

Advisories
Source ID Title
EUVD EUVD EUVD-2023-38112 In SAP Enable Now - versions WPB_MANAGER 1.0, WPB_MANAGER_CE 10, WPB_MANAGER_HANA 10, ENABLE_NOW_CONSUMP_DEL 1704, the Content-Security-Policy and X-XSS-Protection response headers are not implemented, allowing an unauthenticated attacker to attempt reflected cross-site scripting, which could result in disclosure or modification of information.
History

Mon, 21 Oct 2024 22:15:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}

Subscriptions

Sap Enable Now
cve-icon MITRE

Status: PUBLISHED

Assigner: sap

Published:

Updated: 2024-10-21T21:10:43.834Z

Reserved: 2023-05-24T20:41:32.834Z

Link: CVE-2023-33988

cve-icon Vulnrichment

Updated: 2024-08-02T15:54:14.157Z

cve-icon NVD

Status : Modified

Published: 2023-07-11T03:15:09.523

Modified: 2024-11-21T08:06:21.560

Link: CVE-2023-33988

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

No data.

Weaknesses