High

DATE	CVE	VULNERABILITY TITLE	RISK
2019-12-11	CVE-2019-0405	Information Exposure vulnerability in SAP Enable NOW 10/1902/1908 SAP Enable Now, before version 1911, leaks information about the existence of a particular user which can be used to construct a list of users, leading to a user enumeration vulnerability and Information Disclosure. network low complexity sap CWE-200	7.5
2019-12-11	CVE-2019-0404	Information Exposure Through an Error Message vulnerability in SAP Enable NOW 10/1902/1908 SAP Enable Now, before version 1911, leaks information about network configuration in the server error messages, leading to Information Disclosure. network low complexity sap CWE-209	7.5
2019-08-14	CVE-2019-0341	Incorrect Permission Assignment for Critical Resource vulnerability in SAP Enable NOW 1902 The session cookie used by SAP Enable Now, version 1902, does not have the HttpOnly flag set. network low complexity sap CWE-732	8.8