CVE-2022-35293
CriticalCVSS 9.1Exploitation Probability (EPSS)
Low risk45th percentile - higher than 45% of all known CVEs
Summary
Due to insecure session management, SAP Enable Now allows an unauthenticated attacker to gain access to user's account. On successful exploitation, an attacker can view or modify user data causing limited impact on confidentiality and integrity of the application.
Risk Assessment
The organization may be exposed to unauthorized access to user data, potentially leading to breaches of privacy and trust in the system.
Recommendation
It is recommended to implement secure session management and conduct regular security audits to minimize the risk of unauthorized access.
Original NVD description (English source)
Due to insecure session management, SAP Enable Now allows an unauthenticated attacker to gain access to user's account. On successful exploitation, an attacker can view or modify user data causing limited impact on confidentiality and integrity of the application.