Critical severity9.1NVD Advisory· Published Aug 10, 2022· Updated Jun 23, 2026
CVE-2022-35293
CVE-2022-35293
Description
Due to insecure session management, SAP Enable Now allows an unauthenticated attacker to gain access to user's account. On successful exploitation, an attacker can view or modify user data causing limited impact on confidentiality and integrity of the application.
Affected products
3- cpe:2.3:a:sap:enable_now_manager:1.0:*:*:*:*:*:*:*
- SAP SE/SAP Enable Now Managerv5Range: 1.0
Patches
Vulnerability mechanics
References
2- launchpad.support.sap.comnvdPermissions RequiredVendor Advisory
- www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.htmlnvdVendor Advisory
News mentions
0No linked articles in our index yet.