Vulnerability Details CVE-2023-36920
In SAP Enable Now - versions WPB_MANAGER 1.0, WPB_MANAGER_CE 10, WPB_MANAGER_HANA 10, ENABLE_NOW_CONSUMP_DEL 1704, the X-FRAME-OPTIONS response header is not implemented, allowing an unauthenticated attacker to attempt clickjacking, which could result in disclosure or modification of information.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.001
EPSS Ranking 30.0%
CVSS Severity
CVSS v3 Score 6.1
References
Products affected by CVE-2023-36920
-
cpe:2.3:a:sap:enable_now_enable_now_consump_del:1704
-
cpe:2.3:a:sap:enable_now_wpb_manager:1.0
-
cpe:2.3:a:sap:enable_now_wpb_manager_ce:10
-
cpe:2.3:a:sap:enable_now_wpb_manager_hana:10