https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-07T17:53:36.331409+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2023-36918 CVE-2023-36918 — Cross-Site Scripting vulnerability in SAP Enable Now 2026-10-07T17:53:36.349779+00:00

Affected: SAP_SE SAP Enable Now

In SAP Enable Now - versions WPB_MANAGER 1.0, WPB_MANAGER_CE 10, WPB_MANAGER_HANA 10, ENABLE_NOW_CONSUMP_DEL 1704, the X-Content-Type-Options response header is not implemented, allowing an unauthenticated attacker to trigger MIME type sniffing, which leads to Cross-Site Scripting, which could result in disclosure or modification of information.