VULNERABILITY INTELLIGENCE

CVE-2020-6178

CVSS score5.4 MEDIUM
EPSS probability0.73%
CISA KEVNot currently listed
Published2020-03-10
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N

Description

SAP Enable Now, before version 1911, sends the Session ID cookie value in URL. This might be stolen from the browser history or log files, leading to Information Disclosure.

Weakness classification

  • nvd@nist.gov: CWE-200

Primary references