Cross-Site Scripting Vulnerability in SAP Enable Now
CVE-2019-0385
6.5MEDIUM
What is CVE-2019-0385?
The vulnerability found in SAP Enable Now prior to version 1908 arises from inadequate encoding of user-controlled inputs. This flaw allows an attacker to inject malicious scripts into web pages viewed by users, compromising user sessions and potentially leading to data theft or unauthorized actions within the application.
Affected Version(s)
SAP Enable Now < 1908