SAP Enable Now, before version 1908, does not invalidate session tokens in a timely manner. Rated low severity (CVSS 3.3), this vulnerability is low attack complexity. No vendor patch available.
SAP
Information Disclosure
Enable Now
NVD
CVSS 3.1
3.3
EPSS
0.6%
In setMasterMute of AudioService.java, there is a missing permission check. Rated low severity (CVSS 3.3), this vulnerability is low attack complexity. No vendor patch available.
Google
Authentication Bypass
Android
NVD
CVSS 3.1
3.3
EPSS
0.1%
In the WifiConfigManager, there is a possible storage of location history which can only be deleted by triggering a factory reset. Rated low severity (CVSS 2.3), this vulnerability is low attack complexity. No vendor patch available.
Google
Information Disclosure
Android
NVD
CVSS 3.1
2.3
EPSS
0.1%