VULNERABILITY INTELLIGENCE
CVE-2024-39596
CVSS score4.3 MEDIUM
EPSS probability0.26%
CISA KEVNot currently listed
Published2024-07-09
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
Description
Due to missing authorization checks, SAP Enable Now allows an author to escalate privileges to access information which should otherwise be restricted. On successful exploitation, the attacker can cause limited impact on confidentiality of the application.
Weakness classification
- CWE-862: Missing Authorization